What is a managed service provider, and what do they actually do?

The basic idea

Think of an MSP as an IT department you subscribe to. The provider installs small monitoring agents on your computers and servers, connects to your Microsoft 365 or Google Workspace tenancy, and takes over routine care: updates, security alerts, backups and user accounts. Your staff get a help desk to contact when something goes wrong, and you get a single point of accountability for the technology the business relies on.

The key word is managed. A traditional IT contractor reacts to the problems you report. An MSP agrees in advance what it is responsible for and then watches those things without waiting to be told. If a backup fails at 2am or a disk starts showing errors, the provider should see it and act, often before anyone in the office notices.

What a normal month looks like

In a typical month, an MSP will push out Windows and app updates in planned windows, review security alerts from antivirus or detection tools, check that backups completed and occasionally test a restore. The help desk handles requests like password resets, a printer that will not connect, a new shared mailbox or a staff member whose laptop is running slowly.

Alongside that, there is administration that most owners never see: renewing certificates, tidying old user accounts, adjusting firewall rules, licensing a new starter and removing access for someone who has left. A decent provider also keeps notes about your setup, so whoever answers your request does not have to rediscover how your network is put together each time.

What you remain responsible for

Handing IT to an MSP does not hand over every decision. You still decide what the business needs, approve spending on hardware and projects, and tell the provider about changes such as new staff, new software or a planned office move. You are also responsible for your own data under the Privacy Act 2020, even when someone else manages the systems it sits on.

Staff behaviour stays with you as well. An MSP can set up multi-factor sign-in, email filtering and security training, but it cannot stop someone approving a fake invoice if your internal payment process has no second check. The best results come when the owner or office manager treats the provider as a partner and keeps them informed, rather than as a black box that just has to make problems disappear.

Common services an MSP bundles

Most MSP plans combine a help desk, device monitoring and patching, endpoint security, email filtering, Microsoft 365 administration and backup monitoring. Higher tiers often add security awareness training, device management for laptops and phones, network monitoring, onsite visits and regular reviews with someone who looks at the bigger picture and plans ahead.

Projects usually sit outside the plan. Replacing a server, moving to the cloud, setting up a new office network or migrating email are one-off pieces of work with their own scope and price. Ask any provider where that line sits before you sign, so a routine-looking request does not turn into an unexpected invoice.

How an MSP is different from your software vendors

Owners sometimes assume Microsoft, their accounting software company or their internet provider already look after this. They do not, at least not for your specific setup. Microsoft runs the cloud platform, but configuring your tenancy securely, managing who has access and backing up your mailboxes is your responsibility. Your internet provider keeps the fibre connection running to the edge of your building and stops there.

An MSP sits between all of these vendors and your staff. When email stops arriving, they work out whether the fault is Microsoft, your domain settings, a filter rule or a single laptop, and they deal with the right supplier. That coordination role is easy to overlook until you have spent an afternoon being passed between three support lines, each insisting the problem belongs to someone else.

Is an MSP right for your business?

An MSP tends to suit offices with roughly five to a hundred staff who rely on computers to earn money but do not want to employ a full IT team. Below that size, occasional hourly help may be enough. Above it, many businesses keep an internal IT person and use a provider for depth and after-hours cover, which is known as co-managed IT.

A useful test is to ask who currently checks your backups, applies updates and removes access when someone leaves. If the honest answer is nobody, or a staff member who does it when they remember, you have exactly the gap an MSP is designed to fill. If you are unsure where you stand, an IT health check from a provider such as Office IT will show which of those jobs are covered and which are not.