What does managed IT support cost, and what should be included?
Most MSPs charge a fixed fee per user per month. A full managed service for SMEs commonly runs around £60-90 per user per month, covering helpdesk support, monitoring, patching, security essentials, backup and cloud (Microsoft 365) administration. Lighter 'pay-as-you-go' or 'co-managed' models cost less but cover less. Look for a clear SLA with defined response and resolution times, UK-based support, a proper onboarding process, a named contact, and a written breakdown of what's in scope versus what gets charged extra (projects, hardware, out-of-hours).
What is Cyber Essentials and do I really need it?
Cyber Essentials is the UK government-backed baseline certification covering five core security controls: firewalls, secure configuration, access control, malware protection and patching. The basic level is a self-assessment; Cyber Essentials Plus adds an independent technical audit. You may not be legally required to hold it, but it's increasingly expected to win public-sector and larger private contracts, to satisfy cyber insurers, and to demonstrate UK GDPR 'appropriate measures'. It's also a sensible minimum bar, and a reasonable thing to require of your MSP.
How do I avoid overpaying - what are the most common ways SMEs lose money here?
The big four: (1) lapsing onto deemed or rollover energy rates because you missed the contract end date; (2) staying on best-effort broadband when downtime is costing you, or paying for a leased line you don't yet need; (3) signing an MSP or telecoms deal on headline price without checking SLAs, scope and exit terms; and (4) not asking about broker commission or uplift. The fix is unglamorous: keep a simple register of every contract, its end date and notice period, start shopping 3-6 months ahead, and always get the all-in cost in writing, including setup fees, mid-contract rises and exit charges.