Many contractors and energy companies sign a managed IT agreement and then judge it by feel. If nobody is yelling, it must be working. That works until the day a laptop is down for three days on a deadline, or an audit asks for evidence nobody collected. A provider relationship needs a few simple measurements, reviewed on a schedule, or small problems become expensive ones.
You do not need a dashboard with fifty charts. You need a handful of numbers and documents that tell you whether the service is responsive, whether your risk is going down and whether you are getting what the contract promised.
Responsiveness: how quickly and how well
Response and resolution times
Check whether your agreement defines response targets by priority, and ask for reporting against them. Response means a human has acknowledged and started working. Resolution means the problem is fixed. Both matter, and a provider can look good on one while failing the other.
For a field business, ask specifically how a crew member on a remote site gets help. A target that only counts office hours does little for a superintendent at six in the morning.
First-contact fixes and repeat tickets
If the same problem comes back every month, the provider is treating symptoms. Ask for a monthly list of recurring issues and what is being done about the root cause. A rising count of repeat tickets for the same device, site or person is a signal to investigate.
User feedback
Ask for simple satisfaction feedback after tickets close, then read the comments yourself. Employees will say things in a two-line survey that they will never say to you.
Security hygiene: is risk shrinking
These items should be reportable without much effort.
- Patch status: What percentage of devices are current, and which are not? Ask for the reasons behind exceptions.
- MFA coverage: Which accounts do not yet require multi-factor authentication, and what is the plan for them?
- Endpoint protection: Are all devices reporting in? Any device that has not checked in for weeks is a blind spot.
- Backup success and restore tests: Not just that jobs ran, but when the last real restore test took place and what it showed.
- Account clean-up: How many former employees or seasonal workers still have active accounts?
If your provider cannot produce these quickly, they likely are not tracking them.
Contract delivery: are you getting what you pay for
Open the agreement once a quarter and compare it to reality.
- Which services are included, and are they all actually running?
- Are there recurring charges for devices, licenses or users that no longer exist?
- Has the provider delivered the planning work promised, such as a roadmap or budget review?
- Are project hours being billed that should have been covered?
Licensing is a common leak. Unused Microsoft 365 or software licenses can sit on an invoice for months simply because nobody reconciled them against the employee list.
Strategic value: are they thinking ahead
Good providers do more than close tickets. Ask whether you have had a business review in the last quarter, whether it covered upcoming hardware replacements and renewals and whether anyone has talked with you about risks specific to your work, such as jobsite connectivity, payment fraud or compliance obligations from a prime contractor.
If every conversation is reactive, you are buying a help desk, not a partner.
Running a quarterly review
Keep it short and consistent.
- Ask for a one-page report with the numbers above.
- Meet for 45 minutes with someone from operations or finance, not only the person who manages the relationship day to day.
- Pick three action items with owners and dates.
- Revisit last quarter's items first.
Write down decisions. When leadership changes or the provider changes, those notes become your history.
Warning signs
- Reports that arrive late, vary in format or are full of activity counts with no outcomes.
- Vague answers about who has administrator access to your systems.
- Resistance to documenting passwords, configurations and network diagrams in a place you can reach.
- No answer to the question "what would we do if you were unavailable tomorrow?"
You should always be able to leave a provider without losing access to your own environment.
Putting it to work
Ironfield Cyber builds reporting around these questions for contractors and energy firms because owners should not need a technical background to know whether IT is working. If you want a neutral look at what your current provider is delivering, we can review your agreement and reports with you and tell you plainly what is missing.