Most business owners have a general sense of whether their IT is working. The lights are on, emails are sending, and nobody is complaining today.
But “probably fine” is not a security posture. And once a year, every business owner should sit down with their IT provider and ask the questions that actually matter. Not the ones that get answered with a thumbs up and a vague reassurance. The ones that surface real answers.
Here is your list.
“When did you last test our backups?”
Not “do we have backups.” Everyone has backups. The question is whether they actually work when you need them to.
A good answer looks like this:
- A specific date when a full restoration was last tested
- How long the recovery took
- What systems were restored and whether anything failed
If the answer is “it has been a while” or involves a lot of uncertainty, that is your answer (and it is not a good one). The worst time to find out your backups do not work is during an active ransomware attack on a Friday afternoon.
“Who has admin access to our systems right now?”
This is the question the Stryker attack answered the hard way. One compromised admin account wiped 80,000 devices across a Fortune 500 company overnight. No malware required.
A good answer looks like this:
- A current list of every account with elevated privileges
- A clear reason why each one needs that access
- Confirmation that former employees have been removed (this one comes up more than you would expect, especially in businesses that have grown quickly or had turnover)
If your provider cannot pull this list on the spot, that is a gap worth closing before someone else finds it first.
“What would happen if we got hit with ransomware today?”
Most Florida SMBs do not have a real answer to this. They have a general sense that “IT would handle it,” which is not the same thing.
A good answer looks like this:
- Who gets called first and in what order
- Which systems get isolated immediately
- What the realistic recovery timeline looks like
- Whether cyber insurance has been notified and what that process involves
If the answer involves a lot of “we would figure it out,” that is not a plan. That is an expensive improvisation session at the worst possible time.
“What does our IT bill actually cover?”
If your invoices vary month to month, or you have been surprised by project fees, onboarding charges, or after-hours surcharges, this is the question to ask.
A good answer looks like this:
- A clear breakdown of what is included in the monthly fee
- Confirmation that projects, onboarding, and offboarding are covered
- No line items that require a separate conversation to explain
Predictable billing is not a luxury. It is the baseline. If your IT spend feels like a mystery every month, that is worth addressing.
“Is our technology keeping up with where the business is going?”
This is the one that separates an IT vendor from an IT partner, and most businesses never ask it.
If you are planning to hire, grow into a new market, add a service line, or open a second location, your IT roadmap should already reflect that. A provider who is only thinking about today’s tickets is not thinking about next year’s problems.
A good answer looks like this:
- A roadmap that connects your business goals to your technology needs
- Proactive recommendations, not just reactive fixes
- A conversation that sounds less like a helpdesk update and more like a strategic discussion
If your IT provider is not having this conversation with you at least once a year, they are keeping the lights on. Nothing more.
The Bottom Line
None of these questions are technical. You do not need an IT background to ask them, and you should not need one to understand the answers. A good provider answers them directly, with data, and without getting defensive.
If any of these made you realize you do not know the answer, or that you are not confident your provider does either, that is worth a conversation.
→ Schedule Your Free IT Assessment with Rob
→ Learn More About Our Managed IT Services
Published: Apr 28, 2026
Need IT Support for Your Florida Business?
GiaSpace provides proactive managed IT services, cybersecurity, and local tech support across Florida — with teams in Gainesville, Fort Lauderdale, Jacksonville, and Ocala.
Managed IT Services FloridaCybersecurity Services FLGainesville IT ServicesFort Lauderdale IT Services
