Small Business IT Support: What to Expect, and What Your Marketing Company Shouldn't Handle

Small business IT support covers the technology your team uses every day: computers, email and Microsoft 365 accounts, security, backups, Wi-Fi and the help your employees need when something stops working. Most businesses with 5 to 50 people buy it as managed IT, where a provider monitors and maintains everything for a flat monthly fee. Your marketing company is a different job. It should run your website, search rankings and leads, not your laptops.

That line gets blurry fast. Owners ask their web designer to fix the office printer, or ask their IT person why the business isn't showing up on Google. Below is what IT support should include, how the common pricing models work, and a simple way to split the work between your IT provider and your marketing team.

What small business IT support covers

A complete IT support arrangement for a small business usually includes six areas:

• Devices. Workstations, laptops and any servers, monitored so problems show up before they cause downtime.
• Updates and patching. Operating systems, browsers and business software kept current on a schedule.
• Security. Antivirus or endpoint detection on every device, multi-factor authentication on important accounts and secure Wi-Fi.
• Accounts. Microsoft 365 or Google Workspace licenses, email, shared files and setting up or removing employees when they join or leave.
• Backups. Copies of your important data, checked so you know they can actually be restored.
• Help for your team. Someone your employees can call for password resets, slow computers and software problems, plus dealing with your internet provider and software vendors.

The U.S. Small Business Administration's cybersecurity guide for small businesses lists most of these as the basics: train employees, secure your network, use antivirus and keep software updated (ideally automatically), turn on multi-factor authentication and back up sensitive data. It also notes that small businesses can be attractive targets precisely because many lack the time or resources to protect their systems.

Managed IT services vs. break-fix support

There are two main ways small businesses pay for IT help.

Break-fix means you call someone when something breaks and pay by the hour. It looks cheap in a quiet month. The problem is that nobody is watching in between, so updates get skipped, backups quietly fail and a small issue becomes an expensive emergency.

Managed IT services for small businesses flip that around. The provider installs monitoring on your devices, handles patching and security, and supports your team for a flat monthly fee, usually priced by the number of devices or users. You get a predictable bill, and the provider has a reason to prevent problems instead of billing for them.

For most businesses where a few hours of downtime means lost sales or missed deadlines, managed IT is the better fit. Break-fix can still make sense for a one- or two-person business with simple needs.

Remote IT support for small businesses

Most IT work no longer needs someone in your office. Monitoring, updates, account changes, security alerts and most helpdesk requests are handled remotely, which is faster for you and cheaper for the provider. On-site visits are still useful for new hardware, network and Wi-Fi problems, and office moves. When comparing providers, ask what they do remotely, where they can come on-site, and how quickly.

What your IT provider handles vs. your marketing company

Here's the split we use with our own clients:

• Your IT provider: computers and phones, Wi-Fi and network, Microsoft 365 or Google Workspace, employee accounts, antivirus and security, backups of business files, servers, business applications and databases.
• Your marketing company: your website and its hosting, local SEO and your Google Business Profile, reviews, contact forms, your CRM and lead follow-up, email marketing, social media and ads.

A few things sit in the middle and need both sides to talk:

• Your domain and DNS. The website and your email both depend on DNS records. Whoever changes them should tell the other side first, and you should always have the registrar login yourself.
• Business email. IT sets up your mailboxes. Marketing tools send newsletters and follow-ups from your domain, which needs the right SPF, DKIM and DMARC records so those emails don't land in spam.
• Security. Your marketing company keeps the website itself updated and secure. Your IT provider protects the computers and accounts your team logs in from.

The security basics every small business should have

Whoever your IT provider is, these are the minimums. The Cybersecurity and Infrastructure Security Agency (CISA) recommends four core steps for everyone in its Secure Our World guidance: recognize and report phishing, use strong passwords, use multi-factor authentication with a password manager, and keep software updated. For organizations, it adds backing up and encrypting data and having an incident response plan.

CISA's Cyber Essentials guide for small business leaders makes a point owners often miss: cybersecurity is a business risk, not just a technical one. It suggests leaders figure out how much of their operations depend on IT and keep an inventory of the hardware and software they use. A good IT provider builds that inventory for you during onboarding.

Questions to ask before you hire an IT provider

1. What exactly is included in the monthly fee, and what costs extra?
2. How fast do you respond during business hours, and what happens after hours?
3. Is there a long-term contract, and how much notice do I need to give to cancel?
4. Is there a one-time onboarding fee, and what does onboarding include?
5. How do you test that our backups can actually be restored?
6. Will I keep the admin access to our accounts, domains and data if we part ways?
7. Do you mark up hardware and software, or pass it through at cost?

Clear answers to those seven questions tell you more than any sales pitch.

Who we recommend for IT, hosting and software

Venn doesn't do IT support. We build websites, run local SEO and AI visibility, and manage leads and marketing. When our clients need managed IT, Microsoft 365 help, cloud hosting for business apps or custom software, we recommend InnovaERP Solutions, a managed IT provider based in Lincoln, Nebraska. They offer flat-rate managed IT on month-to-month terms, on-site support around Lincoln and Omaha, and remote support everywhere else. In the interest of transparency, InnovaERP is run by Travis Nyhoff, who is also a co-founder of Venn. You can read more on our InnovaERP partner page.

If you'd like to see how your website is doing on the marketing side, run our free website check. It takes about a minute.

Sources

• Strengthen your cybersecurity, U.S. Small Business Administration
• Secure Our World / Cybersecurity Awareness Month, Cybersecurity and Infrastructure Security Agency (CISA)
• Cyber Essentials, Cybersecurity and Infrastructure Security Agency (CISA)