When it comes to managed services, most clients have very valid questions in regards to what managed services are and what they are getting for their money.
As a Managed Service Provider (MSP), our mission is to keep client networks, consisting of servers, desktops, routers, printers, and other peripherals, operational. Even on small networks, this involves making sure the software and hardware of at least a dozen manufacturers is configured properly and remains configured so that the network is as transparent as the plumbing in the building. This sometimes sounds easier than it actually is, but the bottom line is MSPs focus on preventative maintenance to minimize overall risks to a network.
With Information Technology (IT), nothing is absolute or error free. Since no two users are exactly alike, every computer is used slightly different and has slightly different software associated with the machine from cookies to updates to versions of software. Given those differences, each computer will in some small way react differently to commands or how they experience errors. Because of this situation, it is imperative to take a proactive stance on maintenance with the goal of solving potential problems when they are small, rather than waiting for the problem to lead to a catastrophic loss of service or data loss.
Preventative Maintenance
There are two approaches to maintaining computers:
- Focus on reactive maintenance and do nothing until there is a major problem. This mindset leads the network down the path of waiting for a catastrophic failure of some kind and then reacting to it. These situations usually lead to significant downtime and potential data loss. This is an amateurish mindset to have and has no place in a professional organization, since it completely disregards any form of risk management.
- Focus on routine, preventative maintenance with the goal of avoiding major problems. You know there are going to be some problems, but by keeping on top of the smaller issues, it decreases the likelihood of a catastrophic failure will lead to large disruptions. Based on the level of risk the company is worth accepting, it determines the level of preventative maintenance taken. The main question is how crucial is downtime in your organization?
The bottom line is it is far less costly to deal with preventative maintenance than it is to follow the reactive route. You have to take into account the potential loss of revenue from downtime of systems. That expense justifies following a computer lifecycle plan where your server is no more than 3-4 years old.
Mitigating Risk
The risks are very real. Since you are dealing with highly confidential client data, you cannot afford to have your systems unprotected and become compromised. You have a responsibility to your clients to protect their Personally Identifiable Information (PII). It is a liability issue and our goal there is to minimize your overall liabilities in IT by focusing on due care and due diligence:
Due Care: We implement a network that suits your business needs. We set policies requiring complex passwords and configured the server for users to have least privileges.
Due Diligence: We are keeping your machines updated, we are keeping viruses and spyware off the machines, we are backing up your data, we are looking for potential problems on all the machines that could affect their security or cause downtime.
If your goal is to save a little money on a monthly basis, you will neglect the aspect of due diligence. That may comes back to be far more costly in the future if there is a compromise of client data and nothing can be shown that any effort was made to proactively keep machines on the network secure. Again, it comes down to risk management. It is impossible to eliminate all risk, but it is possible to mitigate risk to an acceptable level. The definition of acceptable is different for each organization.