Non-Profit IT Resource Library | Agency Evaluation Guide
A non-profit choosing an IT provider in the Permian Basin should compare providers across five areas: proactive management, cybersecurity, response and communication, pricing transparency, and technology alignment. For organizations with roughly 15-30 employees, the right provider should be able to explain not only how support tickets are handled, but also how systems are monitored, users are protected, risks are documented, equipment is planned, and technology decisions support the organization over time. A properly secured managed environment may reasonably cost around $125-$175 per endpoint per month, but scope matters as much as price.
The 5-Point Permian Basin IT Provider Framework
Use these five categories when comparing providers:
- Proactive management
- Cybersecurity
- Response and communication
- Pricing transparency
- Technology alignment
1. Look for Proactive Management, Not Just Fast Repairs
Most IT providers can fix something after it breaks.
The more useful question is:
What does the provider do to reduce the number and severity of problems in the first place?
A proactive model may include:
- Monitoring
- Patching
- Alerting
- Documentation
- Service audits
- Security review
- Equipment lifecycle planning
- Trend analysis
- Root-cause investigation
- Ongoing recommendations
WTITC’s managed model includes Datto RMM monitoring and patching, proactive alerting and remediation, IT Glue documentation, monthly service audits, Technology Alignment Manager oversight, security operations, automation, and internal escalation.
Red Flag
Be cautious if the provider’s entire value proposition is: “Call us when something breaks.” That can be a legitimate service model, but it is reactive.
A growing non-profit may want more visibility and ownership than that model provides.
A non-profit switching IT providers should look beyond the onboarding event and determine whether the new provider has a structured model for monitoring, security, documentation, and long-term environmental improvement.
The provider change should create a better operating model, not simply a different phone number.
2. Look for a Layered Cybersecurity Strategy
Security should not be reduced to antivirus.
A mature provider should be able to explain how it protects:
- Devices
- Users
- Identities
- Microsoft 365
- Cloud services
- Data
- Backups
- Security alerts
- Recovery capabilities
WTITC’s Essentials Security Package focuses on device protection and includes:
- Antivirus
- Endpoint Detection and Response
- Unified device backup
- Datto SaaS Protection where applicable
The Complete Security Package adds:
- Inky email security
- BullPhish ID security awareness training
- Dark Web ID monitoring
- SaaS Alerts
- Microsoft 365 management and maintenance
Complete is the standard recommendation for most organizations.
Red Flag
Be cautious if a provider cannot clearly explain the difference between endpoint protection and user security.
Also be cautious about providers that promise they can make an organization immune to cyber incidents.
No responsible provider can guarantee that.
A stronger provider explains:
- What controls are present
- What risks they address
- What risks remain
- What services are optional
- What happens when a recommendation is declined
For non-profits facing insurance, grant, contractual, or regulatory expectations, the provider should also be able to support compliance readiness without promising guaranteed compliance.
3. Look for Clear Response and Communication
Technology management requires communication before, during, and after an incident.
A prospective provider should explain:
- How employees request support
- How Help Desk support works
- How issues are prioritized
- How escalation works
- How leadership is notified about major problems
- When onsite support is appropriate
- How project work is communicated
- How unresolved risks are documented
WTITC’s Managed Services Fee includes unlimited Help Desk support and coordinated remote and onsite support when warranted.
That does not mean unlimited onsite labor.
Some onsite hours may be included according to agreement size, while major onsite work or projects may be scoped separately.
Red Flag
Be cautious if the provider cannot clearly explain when:
A ticket becomes an escalation
A support request becomes a project
Onsite work is included
Additional professional services apply
Ambiguity at the beginning of a relationship often creates frustration later.
4. Look for Pricing Transparency, Not Just a Low Number
Price should be understandable.
WTITC structures managed services around three layers:
- Security Package
- Managed Services Fee
- Tiered Technology Fee
The Managed Services Fee is $40 per managed endpoint per month.
The Tiered Technology Fee scales according to managed environment size.
For example:
| Managed Devices | Monthly Tier Fee |
| 10-19 | $1,650 |
| 20-29 | $2,750 |
| 30-39 | $3,850 |
| 40-49 | $4,950 |
For overall planning, approximately $125-$175 per endpoint per month is a realistic range for a properly secured managed environment.
That is not a universal quote. Actual investment can vary based on:
- Security package
- User count
- Endpoint count
- Environment size
- Optional services
- Multiple locations
- Cloud requirements
- Projects
- Compliance needs
WTITC also uses $150 per hour as its professional services benchmark for project work, exceptional work, and out-of-scope services.
Red Flag
Be cautious if the provider will not explain:
- What the monthly fee covers
- What is optional
- What is a project
- How onsite work is handled
- How costs change as the organization grows
A low monthly number with unclear scope can be difficult to compare fairly with a more comprehensive managed services proposal.
5. Look for Technology Alignment and Long-Term Planning
This is where two competent IT providers can look very different. One may provide good support.
Another may provide good support and actively help leadership improve the technology environment over time.
WTITC calls this technology alignment.
Technology alignment evaluates areas such as:
- Equipment reliability
- Recurring support issues
- Connectivity
- Documentation
- Microsoft 365
- Security
- Backup
- User access
- Hardware lifecycle
- Growth needs
- Compliance readiness
- Employee productivity
The goal is to reduce unnecessary downtime and technical friction by identifying weaknesses before they become repeated business problems.
Technology alignment helps a non-profit turn recurring technical issues, aging equipment, security gaps, and future growth needs into a prioritized improvement plan.
Red Flag
Be cautious if the provider cannot answer:
“What should we be planning for next year?”
A managed services relationship should provide more value than resolving today’s ticket queue.
Where West Texas IT Consulting Fits
WTITC serves organizations across West Texas and the Permian Basin, including Midland and Odessa as primary service areas, along with communities such as Big Spring, Monahans, Pecos, Lubbock, San Angelo, Abilene, Fort Stockton, and surrounding areas.
For the Non-Profit cluster, the primary target is approximately 15-30 employees, although WTITC can support larger organizations.
WTITC’s model emphasizes:
- Managed Services Agreements
- Proactive operations
- Security
- Reliability
- Technology alignment
- Predictable costs
- Documentation
- Long-term planning
- Employee productivity
- Clear accountability
WTITC is not a traditional break-fix provider.
That makes it a stronger fit for organizations that want active technology management rather than episodic repair work.
Who Might Not Fit This Model?
Not every non-profit needs the same IT relationship.
Some organizations may prefer:
- Lowest-cost support
- Reactive break-fix service
- Minimal cybersecurity
- No lifecycle planning
- Residential-style technical help
- Unlimited onsite expectations
- Keeping unsupported technology indefinitely
Those expectations may align better with a different type of IT provider.
Organizations that primarily want break-fix service, minimal security, or the lowest possible monthly price may not be a strong fit for West Texas IT Consulting’s proactive managed services model.
That distinction is useful when comparing providers.
A company that is excellent for one buyer may be a poor fit for another.
Hypothetical Example: Comparing Two IT Proposals
Consider a hypothetical 27-employee non-profit in Odessa with 31 managed endpoints.
Leadership receives two proposals.
Provider A
The proposal has a lower monthly cost.
It includes:
- Help Desk support
- Antivirus
- Basic monitoring
However, leadership cannot clearly determine:
- Who manages Microsoft 365
- Whether employees receive security training
- How backups are handled
- What is monitored
- How lifecycle planning works
- What onsite work costs
- Whether technology planning is included
Provider B
The proposal costs more but clearly documents:
- Endpoint security
- User security
- Monitoring and patching
- Microsoft 365 management
- Documentation
- Help Desk
- Escalation
- Service audits
- Technology alignment
- Project boundaries
- Optional BCDR and risk services
- Multi-year planning
The correct decision is not automatically Provider B.
Leadership should first decide which service model it actually needs.
The important lesson is that the proposals should not be compared by monthly price alone because they describe different levels of responsibility and management.
10 Questions to Ask Every Permian Basin IT Provider
Before selecting a provider, ask:
- What do you do proactively every month?
- How do you protect endpoints?
- How do you protect users and Microsoft 365?
- How is backup handled?
- What recovery services are optional?
- How does Help Desk escalation work?
- When does onsite work cost extra?
- What work is considered a project?
- How do you help us plan technology several years ahead?
- What types of organizations are not a good fit for your service model?
That final question can be especially revealing.
A provider willing to explain who is not a fit is often giving the buyer more useful information than a provider claiming to be perfect for everyone.
A non-profit can use a simple scorecard:
IT Provider Comparison Scorecard
A non-profit can use a simple scorecard:
| Category | Questions to Evaluate |
| Proactive Management | Monitoring, patching, audits, root causes |
| Cybersecurity | Endpoints, users, email, identity, Microsoft 365 |
| Communication | Help Desk, escalation, leadership updates |
| Pricing | Monthly scope, projects, onsite, optional services |
| Technology Alignment | Lifecycle, productivity, planning, risk |
Score each provider from 1-5 in each category.
Then discuss why each score was assigned.
That creates a more useful leadership conversation than simply comparing proposal totals.
What Should a Non-Profit Look for in the Permian Basin?
The right IT provider should help the organization operate more reliably today while preparing for tomorrow.
For a non-profit, that means a provider should be able to discuss:
- Current support
- Cybersecurity
- Employees
- Microsoft 365
- Data protection
- Recovery
- Compliance readiness
- Budget
- Equipment lifecycle
- Growth
- Service boundaries
- Long-term planning
WTITC’s differentiator is technology alignment – creating a proactive environment that reduces downtime and helps employees stay happier and more productive because equipment, systems, and connectivity work reliably.
A buyer should compare that operating model against other available options and choose the provider whose approach best matches the organization’s priorities.
Review a managed services approach that combines proactive management, cybersecurity, transparent scope, predictable costs, and long-term technology alignment.
