What Happens on an IT Readiness Assessment (and Why It Comes First)

Why an assessment comes before the contract

If you've ever called an IT company and been quoted a monthly price on the spot, you should be a little skeptical. Any provider that hasn't looked at your network, your computers, and how your team actually works is guessing. And guesses turn into surprise costs, missed problems, and finger-pointing later.

That's why a reputable managed IT services provider (an "MSP" — a company that handles your technology for a flat monthly fee) starts with an IT readiness assessment. Think of it like a home inspection before you buy a house. It's a structured look at what you have, what's working, what's at risk, and what it will realistically take to support you well.

An assessment protects you, too. It tells you whether a provider is a good fit before you sign anything — and it gives you a clear, honest picture of your own technology, even if you never hire them.

What actually happens during the assessment

A good assessment is part conversation and part hands-on discovery. Here's what it usually covers.

1. A conversation about your business

Before anyone touches a computer, a good MSP wants to understand how your business runs:

• How many people work there, and where (office, home, both)?
• What software runs your day-to-day? (Accounting, scheduling, a practice-management or point-of-sale system, etc.)
• What would grind your business to a halt if it went down for a day?
• Any compliance rules you have to follow — HIPAA for healthcare, or requirements from your cyber insurance policy?
• What's frustrating you right now?

This matters because technology should serve the business, not the other way around. A dental office in Weymouth and a small manufacturer in Braintree can have the same number of employees and completely different needs.

2. A look at your network and internet

Next comes the physical and network side — the plumbing that everything else runs on:

• Internet connection: Who's your provider, what speed are you paying for, and is there a backup if it goes down?
• Router and firewall: The device that connects you to the internet and (should) block threats. Is it business-grade or a consumer box from a big-box store?
• Wi-Fi: Coverage, dead zones, and whether guests are separated from your business network.
• Switches and cabling: The wiring that connects everything in the office.

3. An inventory of every device

You can't protect what you don't know about. The assessment catalogs:

• Every desktop, laptop, tablet, and phone that touches business data
• The age and condition of each machine
• What operating system each runs (and whether it still gets security updates — Windows 10, for example, has a fixed end-of-support date after which it stops receiving patches)
• Printers, scanners, and any specialized equipment

It's common for a 20-person company to discover it has three or four aging laptops that are one hard-drive failure away from a bad week.

4. A security and backup review

This is often where the biggest surprises show up. Expect questions and checks around:

• Backups: Is your data being backed up? Where? And — the question almost nobody can answer — has anyone ever tested that the backup actually restores?
• Antivirus and threat protection: What's installed, and is it actually running on every machine?
• Passwords and accounts: Are people sharing logins? Is anyone still able to access systems after leaving the company?
• Multi-factor authentication (MFA): The second step — like a code on your phone — that stops most account break-ins. Is it turned on for email and key apps?
• Email security: Whether your domain has basic protections against spoofing and spam.

5. A review of accounts, licenses, and "who has the keys"

A quietly important part of the assessment: figuring out who actually controls your technology. It's surprisingly common for a small business to not have the admin login to its own Microsoft 365 account, or to have a domain name registered under a former employee's personal email. The assessment finds these gaps so ownership can be put back in your hands.

What you get at the end

A worthwhile assessment produces something you can hold onto — not just a sales pitch. You should walk away with:

• A written summary of what you have
• A prioritized list of risks, usually sorted into "fix now," "fix soon," and "keep an eye on"
• Realistic, general cost ranges for the important items (no provider can give exact numbers without knowing your specifics)
• A clear recommendation on what ongoing support would look like

Good providers explain findings in plain language. If someone hands you a report full of jargon and no priorities, that tells you something about how they'll communicate as a partner.

How to prepare (a quick checklist)

You don't need to do homework, but the assessment goes faster if you can gather:

• A rough count of employees and devices
• The name of your internet provider
• Login details for your email/Microsoft 365 or Google Workspace account (or at least knowing who has them)
• A list of the key software your business depends on
• Any cyber insurance policy or compliance requirements you're aware of
• Your top two or three tech frustrations

Fair warning: what a real assessment is not

• It's not a 10-minute phone quote. Real understanding takes a proper look.
• It's not free labor you should feel guilty about. Reputable MSPs offer it as a genuine no-obligation step, because it's how they decide if they can help you.
• It's not a scare tactic. A good report is honest, including the things you're already doing right.

Why this order matters

When the assessment comes first, the eventual contract is built on facts instead of assumptions. You know what you're paying for. The provider knows what they're taking on. And the awkward surprises — the unpatched server nobody mentioned, the backup that never worked — get found on day zero instead of during your first emergency.

For a small business without in-house IT staff, that clarity is the whole point. You're not just buying support; you're handing someone responsibility for the systems your livelihood runs on. You deserve to know they've actually looked under the hood.

Ready to see where you stand?

At Elecrics, we work with small and mid-sized businesses across Braintree, Quincy, Weymouth, and the greater South Shore, and an honest assessment is always where we start. If you'd like a no-pressure conversation about your setup, you can book a free 20-minute IT Fit Call at https://elecrics.com/book. Even if we're not the right fit, you'll come away knowing more about your own technology than when you started.