You are reading Part 2 of our 12-part Supply House Authority Series.
A managed IT service agreement for a supply company should provide more than a Help Desk and antivirus. For a properly managed environment, businesses should expect a combination of security, endpoint management, monitoring, documentation, user support, technology alignment, and environment-wide oversight. At West Texas IT Consulting, the structure has three core layers: a Security Package, a $40 per endpoint per month Managed Services Fee, and a Tiered Technology Fee based on environment size.
For many 15 to 30 employee supply companies, the resulting investment generally falls around $125 to $175 per endpoint per month, depending on the environment and security requirements.
The 6-Layer Managed Services Framework
Supply companies can evaluate an agreement using six layers:
- Device security
- Monitoring and maintenance
- Help Desk and support
- User, email, and Microsoft 365 protection
- Technology alignment and environment management
- Clearly defined optional and project services
A provider that cannot clearly explain these layers may make it difficult for a business owner to understand what is actually being purchased.
1. Device Security Should Protect More Than Basic Antivirus
Modern endpoint security needs to address malware, ransomware, data loss, and suspicious activity.
WTITC’s Essentials Security Package is designed for device protection and includes:
- Antivirus
- Endpoint Detection and Response
- Unified device backup
- Datto SaaS Protection where applicable
For a building supply company in Midland, for example, computers may connect employees to inventory, estimating, accounting, email, vendor systems, and customer information.
One infected endpoint can therefore create consequences outside that individual computer.
Security controls also contribute to regulatory compliance readiness and cyber insurance preparation by helping demonstrate that systems are actively protected and managed. They do not guarantee compliance or insurance eligibility.
Cybersecurity risks facing supply companies extend beyond malware because email compromise, credential theft, ransomware, and vendor impersonation can all interrupt normal operations.
Monitoring, Patching, and Documentation Form the Operational Foundation
WTITC’s Managed Services Fee is $40 per managed endpoint per month and applies to managed workstations and servers.
The fee includes:
- Datto RMM monitoring and patching
- Proactive alerting and remediation
- IT Glue documentation
- Secure password management
- Unlimited Help Desk support
- Coordinated remote and onsite support when warranted
Monitoring matters because many technology failures provide warning signs before the business notices them.
A hard drive may begin reporting problems. A service may repeatedly stop. A workstation may fall behind on patches. A backup may fail. Storage may approach capacity.
A proactive operating model attempts to identify these conditions before they turn into larger disruptions.
Documentation is equally important. If information about the network, systems, credentials, vendors, and configurations exists only in someone’s memory, the business has unnecessary operational risk.
3. Help Desk Support Should Have Clear Boundaries
Employees need a reliable way to get help when technology interferes with their work.
Under the WTITC managed services structure, unlimited Help Desk support is included. Remote support is part of the agreement structure.
Onsite support is different.
WTITC does not promise free or unlimited onsite support. Approved expectations include:
- Coordinated onsite support when warranted
- Some onsite hours may be included based on agreement size
- Onsite work may be scoped separately
- Major projects may fall outside the managed agreement
- Additional onsite requirements may require professional services
This distinction protects both sides from unclear expectations.
A managed services agreement should create accountability, but accountability does not mean every future technology project is automatically included in the monthly fee.
Knowing what a supply company should budget for managed IT makes it easier to distinguish recurring operational services from projects, optional protections, and exceptional work.
4. User and Microsoft 365 Security May Require a Broader Package
Protecting a workstation does not fully protect the employee.
Users work in email, Microsoft 365, cloud applications, vendor portals, and other systems that attackers can target without infecting a computer first.
WTITC’s Complete Security Package adds user and environment protection to the Essentials controls.
It includes:
- Inky email security
- BullPhish ID security awareness training
- Dark Web ID monitoring
- SaaS Alerts
- Microsoft 365 management and maintenance
The Complete package is the standard recommendation for most organizations.
For an electrical supply company, an attacker does not necessarily need to “hack the network” in a dramatic way. A convincing vendor-payment email or stolen Microsoft 365 password may be enough to create a serious problem.
This is why user security should be discussed separately from device security.
It can also support regulatory compliance readiness, security questionnaires, cyber insurance requirements, and documented control reviews.
5. Environment-Wide Management Is Different From Endpoint Support
Some work benefits the entire technology environment rather than one individual endpoint.
WTITC uses a Tiered Technology Fee to fund these responsibilities.
| Managed Devices | Monthly Tier Fee |
| 1-9 | $1,050 |
| 10-19 | $1,650 |
| 20-29 | $2,750 |
| 30-39 | $3,850 |
| 40-49 | $4,950 |
| 50-59 | $6,050 |
| 60-69 | $7,050 |
| 70-79 | $8,250 |
| 80-89 | $9,350 |
| 90-99 | $10,450 |
This fee supports:
- 24/7 monitoring infrastructure
- Security operations and alert triage
- Monthly service audits
- Technology Alignment Manager oversight
- Tooling and automation
- Internal escalation paths
- Service management
- Dispatch
- Quality control
Technology alignment is particularly important for supply companies because small technical problems can become operational friction.
An unreliable wireless connection in the wrong part of a facility, aging workstations at a sales counter, recurring printer problems, or poorly managed Microsoft 365 accounts can waste small amounts of time repeatedly.
Across 15 to 30 employees, those interruptions add up.
The goal of alignment is to systematically identify weaknesses and move the environment toward agreed standards.
Technology alignment can reduce downtime by identifying recurring weaknesses before they become larger operational problems for employees, inventory workflows, customer service, and management.
6. Optional Services and Projects Should Be Clearly Identified
A good managed services agreement should also tell you what is not automatically included.
WTITC may offer separately:
- Business Continuity and Disaster Recovery
- Third-party penetration testing through Vonahi
- Compliance Manager
If a client declines one of these services, the associated operational, security, and compliance risk should be understood.
Project and exceptional work may also be separately scoped using a $150 per hour professional services benchmark.
Examples include:
- Server projects
- Network upgrades
- Security upgrades
- Camera projects
- New locations
- Migrations
- Exceptional or out-of-scope work
- Large onsite projects
Clear boundaries are a trust signal. They allow a supply company to budget realistically instead of assuming that every possible technology need is buried somewhere inside one monthly number.
Example – A 27-Employee Electrical Supply Company
Consider a hypothetical electrical supply company in Midland with:
- 27 employees
- 29 managed endpoints
- Microsoft 365
- A warehouse and sales counter
- Accounting and inventory applications
- Frequent vendor email
- Several employees who work remotely or from different locations
The company has historically called an IT technician only after something stopped working.
Under a managed model, the environment would instead be evaluated across all six layers.
Devices would receive defined protection. Monitoring and patching would create visibility. Employees would have Help Desk support. Microsoft 365 and users could receive additional protection through the Complete package. Environment-wide oversight would identify recurring weaknesses. Projects and optional risk-management services would remain clearly separated.
The objective is not to create more technology.
The objective is to make the technology the business already depends on more secure, reliable, documented, and manageable.
Managed Services Agreement Checklist
Before signing an agreement, ask the provider:
- Which endpoint security products are included?
- Is EDR included?
- Are backups included, and what type?
- Is monitoring 24/7?
- Who manages patching?
- Is Help Desk support included?
- How is onsite support handled?
- Is Microsoft 365 management included?
- Is email security included?
- Is security awareness training included?
- How are passwords and technical documentation managed?
- Is there a technology alignment process?
- How are recurring problems identified?
- Which services are optional?
- Which projects are separately billed?
- How are security and compliance risks documented when a recommended service is declined?
These questions reveal much more than simply asking for the monthly price.
What Should Be Included in a Good Managed IT Agreement?
A strong agreement should define who is responsible for protecting devices, managing systems, supporting users, monitoring the environment, documenting technology, addressing recurring weaknesses, and planning improvements.
It should also clearly explain what is optional and what may require separate project work.
For a supply company, that clarity helps management understand not only what IT costs, but what business risks the investment is intended to address.
Review managed services that combine device protection, user security, monitoring, documentation, Help Desk support, and proactive technology alignment.
