What does a monthly IT support plan include?
Every provider puts its plans together in its own way, but these are the services that usually show up in a plan for small and midsize businesses:
| Area | What gets done | Why it matters |
|---|---|---|
| Help desk | One channel to ask for help (email, chat or WhatsApp) where every request is logged until it is resolved. | Nobody loses a morning looking for someone to ask. |
| Updates and patches | Windows, macOS, browsers, antivirus and everyday software are kept up to date. | Microsoft releases its security updates on the second Tuesday of every month (Microsoft). Someone has to apply them and check that nothing broke. |
| Backups | Automatic backups of files, email and servers, with test restores. | A backup that was never tested may not work on the day you need it. |
| Security | Managed antivirus, two-factor authentication on accounts, per-person permissions and access reviews. | A single compromised account can open up the whole company’s email and files. |
| Microsoft 365 or Google Workspace | Adding and removing users, licenses, mailboxes, domains, shared folder permissions. | When someone joins or leaves the company, their access is sorted out the same day. |
| Computers and hardware | Inventory, setup of new computers, printers, network and planned replacement. | You know what you have, who uses it and what is worth replacing. |
| Monitoring | Alerts for full disks, computers missing updates, failed backups or certificates about to expire. | Many problems get fixed before anyone notices them. |
Some plans also cover website maintenance and hosting, because part of the work overlaps: updates, backups and security. If your site runs on WordPress, for example, the server’s PHP version also needs attention; we explain this in PHP vulnerabilities and how to protect your website.
Monthly plan or pay per incident?
Both models work, for different companies.
| Monthly plan | Pay per incident | |
|---|---|---|
| When the technician steps in | On an ongoing basis, including when nothing is wrong | Only after something has already failed |
| Updates and backups | Included and checked at an agreed frequency | Depend on someone on your team remembering |
| Knowledge of your setup | The provider documents your computers, accounts and admin passwords | Every technician starts from scratch |
| Response times | Agreed in writing | Whatever availability there is at the time |
| Spending | Predictable month to month | Variable, with spikes when something urgent comes up |
| Who it suits | Teams that rely on their systems every day | Very small businesses with few computers and simple use |
The real difference is who takes care of prevention. With pay per incident, nobody checks whether backups are running until one is needed. With a plan, that check is part of every month’s work.
What are the signs your company needs a plan?
- The person who “knows about computers” has another job at your company (office admin, sales, the owner) and loses hours of work fixing technical problems.
- The same problems keep coming back: the printer that drops off, the email that won’t sync, the network that goes down in the afternoon.
- Nobody knows for sure whether there are backups, where they are or when anyone last tried restoring one.
- When someone leaves the company, their accounts stay active, or several people share the password to one mailbox.
- Some computers run systems that are no longer supported. Windows 10 stopped receiving free updates on October 14, 2025; organizations that still use it only get patches if they sign up for the paid Extended Security Updates program, which lasts three years at most (Microsoft).
- Accounts don’t have two-factor authentication. Microsoft says that two-step verification, together with blocking legacy sign-in methods, stops more than 99.9% of common attacks on accounts (Microsoft).
How should backups work?
The US Cybersecurity and Infrastructure Security Agency (CISA) recommends the 3-2-1 rule to small and midsize businesses: three copies of important files, on two different types of storage (for example, a drive and the cloud), with one copy kept offsite (CISA).
The same guidance calls for automatic, encrypted backups with an offline version, and restore tests that let you go back at least seven days. A good plan includes those tests and lets you know when a backup has failed.
What should you ask an IT support provider?
Before you sign, get these answers in writing:
- What is included and what is billed separately? For example, setting up a new computer, an email migration or an on-site visit.
- How long do you take to respond and to resolve? Ask about response times by urgency and about support hours.
- Which channel do I use to make requests, and how do I see the status of each one?
- How often do you check backups, and when was the last test restore?
- How do you apply patches? Whether they are tested first, what time they are installed and what happens if an update causes problems.
- Who holds the admin passwords and where are they documented? Your company’s information has to stay in your name and be able to move to another provider if you ever switch.
- What report do I get each month? Requests handled, computers updated, backups verified and recommendations.
Pay close attention to points 4 and 6. If the answer is vague, chances are nobody is checking the backups or documenting access.
What we offer at AiDo Creative
We work with monthly plans for IT support, website maintenance and hosting for small businesses, with teams in New Jersey and Buenos Aires. We work mainly remotely and in your language, and we arrange on-site visits when they are needed.
- Help desk with a single channel where every request is logged.
- Microsoft 365 and Google Workspace: as a Microsoft Partner we manage licenses, users, permissions and domains, and help you migrate from one platform to the other.
- Computers: as OEM system builders we build computers around how each workstation is used, with genuine Windows, drivers and software installed.
- Security and backups with regular reviews.
You can find the details on our IT Support page.
In short
- A monthly plan covers help desk, patches, backups, security, Microsoft 365 or Google Workspace accounts, computers and monitoring.
- Paying per incident works for very small businesses; a plan makes sense when daily work depends on your systems.
- Recurring problems, untested backups, accounts without two-factor authentication or computers still on Windows 10 are signs it's time to look into one.
- Ask in writing what is included, the response times, how backups are tested and who holds the passwords.
Frequently asked questions
How many computers does a company need for a plan to make sense?
There is no set number. How much the business depends on its systems matters more than how many computers it has: a five-person office that invoices and serves clients by email may need a plan more than a shop with ten computers used for simple tasks.
Does monthly support replace an in-house IT person?
At many small businesses, yes. At larger companies it usually works alongside one: the in-house technician handles what comes up day to day and the provider brings in specialists and monitoring.
What happens to my data if I switch providers?
It should stay in your name: admin accounts, licenses, domains and documentation. Ask for this in writing from the start, so a switch doesn't depend on anyone's goodwill.
Answers from the AiDo Creative teamIT support
Help desk, PC builds and Microsoft 365, as a Microsoft Partner and OEM system builder.
View the service
