What Happens on an IT Readiness Assessment (And Why First)

Why an assessment comes before a contract

Imagine hiring a contractor to renovate your office without them ever walking through the building. They'd be guessing at the wiring, the layout, and the budget. IT works the same way. A reputable managed IT services provider (an MSP — a company that handles your technology for a monthly fee) won't quote you a real contract until they've actually looked at what you have.

That look is called an IT readiness assessment. It's a structured review of your technology, your security, and your risks. For a 5–50 person business on the South Shore with no in-house IT person, it's the single most useful first step — whether or not you end up hiring anyone.

Here's the honest reason it comes first: nobody can price or plan support for systems they haven't seen. If a provider offers you a flat contract over the phone without looking, be cautious. They're either padding the price to cover unknowns or they'll hit you with surprise charges later.

What actually gets reviewed

A good assessment usually covers five areas. You don't need to understand the tech — you just need to know what's being checked.

1. Hardware and the "stuff in the closet"

Someone walks through (or remotely inventories) your physical equipment:

• Computers and laptops — age, condition, and whether they can still run current software
• Your server, if you have one, or where your files actually live
• The network gear: your internet router, switches (the boxes that connect everything), and Wi‑Fi access points
• Printers, scanners, and anything else plugged into the network

That dusty box humming in the supply closet? The assessor figures out what it does and whether it's about to fail. An example we see constantly: a single aging server quietly running the whole company with no backup — a problem nobody noticed until it was explained out loud.

2. Accounts, email, and software

Next comes the digital side:

• How many people have Microsoft 365 or Google Workspace accounts — and whether any belong to ex-employees who still have access
• Who has admin rights (the "master key" that can change settings and add users)
• What software your business depends on, and whether it's current or dangerously outdated
• Licensing — are you paying for seats you don't use, or using software you aren't licensed for?

It's common to find a business paying for 25 email accounts when only 18 are active. That's money back in your pocket.

3. Security posture

This is usually where the biggest surprises live. The assessor checks:

• Multi-factor authentication (MFA) — the second step, like a code on your phone, that stops a stolen password from being enough. Is it turned on everywhere, or nowhere?
• Antivirus and threat protection — installed, updated, and actually running?
• Firewall configuration (the barrier between your network and the internet)
• Whether former employees still have active logins
• Password habits — shared logins, sticky notes, or a reused password across every account

This also matters for cyber insurance. Many Massachusetts insurers now require MFA and other controls to pay a claim. An assessment tells you where you stand before you're forced to attest to something on an application.

4. Backups and recovery

There's a critical question most owners can't answer confidently: If your main computer or server died tonight, how much work would you lose, and how long until you're running again?

The assessment verifies:

• Whether backups exist at all
• Whether they're actually working (a backup nobody has tested is just a hope)
• How far back they go and how fast you could restore

We regularly meet businesses with a backup drive that quietly stopped working months ago. Nobody knew because nobody checked.

5. Documentation and vendors

Finally, the boring-but-vital stuff:

• Who's your internet provider, and what's the account info?
• Where are the passwords to critical systems?
• Who do you call when the point-of-sale system or the accounting software breaks?

Many small businesses keep all of this in one person's head. When that person leaves or retires, the knowledge walks out the door.

What you get at the end

A proper assessment should produce something you can actually read — not a pile of jargon. Expect:

• A plain-language summary of what you have and what condition it's in
• A prioritized risk list: what's urgent, what's important, and what can wait
• Rough, clearly-approximate cost ranges for fixing the important items
• A recommendation on whether ongoing managed support makes sense for you

Notice that last point. A trustworthy assessment can conclude that you don't need a full monthly contract yet — maybe just a few one-time fixes. That honesty is the point.

How to prepare (a quick checklist)

You can make the process faster and more accurate with a little prep:

• Make a rough list of your computers and who uses each one
• Know who your internet provider is
• Gather any software your business can't operate without (accounting, scheduling, industry-specific tools)
• Note who currently handles tech problems — a nephew, a vendor, nobody?
• Flag anything that's been annoying you: slow Wi‑Fi in the back office, a printer that quits, email that lands in spam
• Have an owner or office manager available for about 30–45 minutes of questions

How long it takes and what it costs

For a business of 5–50 people, an assessment typically takes anywhere from a day to a couple of weeks, depending on how much remote scanning versus on-site walkthrough is involved. Some providers offer a basic version at no charge as part of getting to know you; a deeper, formal audit may carry a one-time fee. Ask upfront which you're getting and whether there's any obligation attached.

One fair warning: an assessment is a snapshot in time. Technology drifts — people come and go, software updates, threats change. That's exactly why ongoing reviews (not just a one-time look) matter, but you don't need to commit to anything to get the initial picture.

The bottom line

An IT readiness assessment protects you. It gives you an honest inventory, exposes the risks you can't see, and lets you make decisions with real information instead of a sales pitch. It should always come before any contract — because a provider who understands your environment can price it fairly, and one who doesn't is guessing with your money.

If you're a business owner or office manager anywhere from Braintree to Quincy, Weymouth, or across the greater South Shore, and you've never had your setup looked at properly, that's worth fixing. Elecrics offers a free 20‑minute IT Fit Call where we talk through your situation and whether an assessment makes sense — no pressure, no jargon. You can book one at https://elecrics.com/book.