How do you choose a managed IT services provider?
To choose a managed IT services provider, evaluate its scope of services, its ISO/IEC 20000-1 and ISO/IEC 27001 certifications, its SLA by severity, its pricing model, how it handles the transition from your current provider, its references and its exit terms. Ask for evidence on each point before you sign.
Updated: October 12, 2026 · By N.Technology
Ten criteria and what to ask.
Scope
Which domains do they operate (servers, networks, cloud, databases, security, end-user devices), and which do they subcontract?
Certifications
Are they certified in ISO/IEC 20000-1 and ISO/IEC 27001? What is the scope of the certificate, and until when is it valid?
SLA
What response and resolution times do they commit to by severity? What penalties apply?
Pricing
Do they charge by the hour, per ticket, per user or a fixed fee? What is included and what is not?
Transition
How do they take over operations without leaving gaps? Can they run in parallel with your current provider?
References
Which organizations in my industry do they work with? Can I speak with one of them?
Automation
What share of incidents is resolved automatically, and with what approval controls?
Neutrality
Do they recommend technology based on my needs, or on the vendors and products they need to sell?
Reporting
Which metrics do they report, and how often? Is there a regular executive review?
Exit
If the contract ends, how will they hand over documentation, access and operations?
Red flags to avoid.
An SLA without times by severity, per-ticket pricing that grows with every incident, no verifiable certifications, a single vendor recommended for everything, and no transition or exit plan.
How we answer these criteria.
N.Technology (N Digital Evolution Group) is an IT systems integrator and managed IT services provider headquartered in Mexico City, operating in Mexico, Colombia and the United States. It designs, supplies, integrates and operates infrastructure, cloud, networks, cybersecurity, and data and AI, with a 24/7 NOC and IT service desk, and is certified in ISO 9001, ISO/IEC 20000-1 and ISO/IEC 27001.
We operate 8 domains under one contract, one SLA and a fixed monthly fee, with a parallel transition and a free assessment to size the service.
What clients ask us.
What certifications should a managed IT services provider have?
The most relevant are ISO/IEC 20000-1 for IT service management and ISO/IEC 27001 for information security. Beyond confirming that a provider holds them, review the scope of each certificate and the date it is valid until, and check that the services you are buying fall within that scope.
What should a managed services SLA include?
A managed services SLA should include response and resolution times by severity, coverage hours, the metrics that will be measured, regular reporting, penalties for missed targets and a clear escalation procedure. Without times by severity, an SLA gives you little leverage when a critical service goes down.
Is IT outsourcing the same as managed services?
They are closely related terms. IT outsourcing delegates functions or staff to a third party; managed services delegate the operation of technology domains, with outcomes measured against an SLA. In other words, outsourcing buys capacity, while managed services buy measurable results for each domain the provider runs.