What Is a Managed Service Provider (MSP)?

By Zach Launey, President, NRVPC

The short answer

A managed service provider (MSP) takes ongoing responsibility for a defined set of your systems for a flat monthly fee, covering about 90% of day-to-day operations. It measures its success by how rarely you need to call. NRVPC is a managed service provider (MSP) based in Fairfax, Virginia. For NRVPC clients near the Virginia I-495 corridor, that means every company-owned computer, the firewall, the email platform, user onboarding and offboarding, security monitoring, and the help desk, with a 12-minute average response time during business hours.

What does MSP mean?

MSP stands for managed service provider. The definition we published under my byline in 2024 reads: "MSPs, for instance, will charge a scaled flat monthly fee for each user that covers about 90% of day-to-day operations. These companies focus on automation, workflows, and providing an expertly-crafted software stack that is quick to configure. A good MSP will provide network security and minimal service calls, all while actively catching problems before they occur."

The word that matters is "managed." The service an MSP sells is called managed IT services. When someone searches "what is managed IT services," they are asking about the same arrangement from the buyer's side: the MSP is the company, and managed IT services are what you receive.

What "managed" covers differs from one provider to the next, so the honest definition is a list of the minimum. At NRVPC, every managed IT client, whatever the industry, receives the same core scope:

  • All company-owned computers: desktops, laptops, servers, and the network that connects them
  • The firewall, on Sophos, SonicWall, or UniFi
  • The email and productivity platform: Microsoft 365, Google Workspace, or a local domain
  • User onboarding and offboarding
  • Network security monitoring and response
  • Unlimited help desk for every employee

Everything on that list is ours to keep running. That is the practical meaning of "managed." The full itemized scope is in what is included in managed IT services.

What does a managed service provider actually do?

An MSP's work runs on two tracks: the work you see and the work you do not.

The work you see is the help desk. Someone on your team cannot print, a new hire starts Monday, a laptop needs replacing. At NRVPC, that request goes to a local engineer through IT help desk support. Our average response time is 12 minutes, and 63% of issues are resolved remotely within the hour. When a visit is the right answer, NRVPC provides one-hour on-site response across the Washington, D.C. area.

The work you do not see is where the definition's "90% of day-to-day operations" lives. Through remote IT monitoring, agents on every device report back to us. Monitoring runs 24/7, our average issue detection is 8 minutes, and engineers respond during business hours. Patches go out on a schedule. Cloud solutions include automatic daily backups. Security tooling is managed centrally: MFA on all email and VPN, managed endpoint security on every computer, encryption on every device holding sensitive data, documented firewall rules, least-privilege access, and quarterly security audits. Employees receive security awareness training. End-of-life equipment comes out of service, and every server stays under warranty.

Then there is the planning work, which is what makes a managed service provider more than a help desk. At NRVPC, that means quarterly business reviews with your leadership, a 3-year technology roadmap, hardware refresh budgeting, and independent vendor evaluation when you are weighing a purchase. Technology decisions get made on a calendar, with numbers.

A technician reaches up to route mint-green fibre patch cables across a server rack lit in electric blue

How is an MSP different from an IT support contractor?

The contractor definition from our original post is the other half of the picture:

"Contracted IT Support, on the other hand, usually bills in prepaid hours. Their clientele receives a certain amount of support per month, with overages costing more. A good IT support contractor should always respond to and fix your problems quickly while also keeping your network secure."

As with any industry, there are pros and cons to each model. The table below is how we explain the difference in a first meeting.

Managed service provider (MSP) compared with an IT support contractor
Managed service provider (MSP)IT support contractor
How you are billedFlat monthly fee, scaled to each userPrepaid block of hours each month, with overages billed
What the fee coversAbout 90% of day-to-day operationsThe hours you bought
Provider's focusAutomation, workflows, and a software stack that is quick to configureResponding to and fixing your problems quickly
Measure of a good oneMinimal service calls; problems caught before they occurFast response and fix, with the network kept secure
Best fitA business that wants to run on a specific set of provided toolsA business with multiple systems that can't be automated and needs help administering them
At NRVPCAll-You-Can-Eat managed IT services for one predictable monthly feeProject work of 8 hours or more, or multiple engineers, scoped and billed separately

MSPs make two arguments for the flat-fee model, and both are convincing:

  1. Any business model that relies on things breaking to bill hours is a bad business model.
  2. Something that is serviced regularly will have less problems and cause less downtime.

I also wrote about a healthcare client of ours with a phone system with call queues and ring groups, vaccine refrigerators and freezers that require Department of Health audits, Square payment terminals, and multiple locations with key fob access. Those systems sit outside the flat fee; at NRVPC it covers the devices, network, and logins they depend on, each vendor owns its platform, and NRVPC coordinates with the vendor. Neither model is inferior; the right one depends on whether your business can run on a provided set of tools. The reasoning is in in-house IT vs MSP vs IT contractor.

How does an MSP charge?

The definition says it: a scaled flat monthly fee for each user. In practice, MSPs price in one of three ways.

  • Per user: one rate for every employee, whatever devices they use. This is the structure our 2024 definition describes.
  • Per device: one rate for every computer, server, and network device under management.
  • Tiered bundles: a base plan plus add-ons for security, compliance, or backup.

NRVPC's fee is per user, per month, in two plans; the current prices are on our pricing page. One predictable monthly fee covers unlimited support for every employee on company-owned computers. We call it All-You-Can-Eat. Project work of 8 hours or more, or multiple engineers, is scoped and billed separately. An NRVPC agreement runs one year and renews automatically unless the price changes by more than 5%; leaving takes 30 days' notice.

A white ceiling-mounted wireless access point with a blue status light in a corridor

What should any IT provider do, MSP or not?

Whether it's an MSP or an IT contractor, your support company should:

  1. Keep all your systems patched and keep an eye on the news for security threats.
  2. Prevent problems from happening and fix them quickly when they do.
  3. Maintain and test your backups.
  4. Provide a pleasant experience for the people they interact with.
  5. Have a good understanding of your systems and help your company grow.

That list is a useful test for any proposal on your desk. Ask how each of the five is done, by whom, and how often. At NRVPC, the answers are the security standards, monitoring, backups, help desk, and planning work this guide has already described.

Who is an MSP the right fit for?

My recommendation to a business owner wondering if they want an MSP or an IT contractor to handle their technology services is this: If you want your business to run on a specific set of provided tools, an MSP is your best bet. However, if you have multiple systems that can't be automated and you need help administering them, hire in-house or get an IT contractor.

At NRVPC, the fit is specific enough to write down:

  • 20 to 500 employees using company-owned computers
  • At least one office near the Virginia I-495 corridor, from Arlington and Alexandria through Fairfax, Tysons, Reston, and Herndon to Northwest Washington DC and Bethesda
  • A Windows-primary environment; Mac is supported with clear expectations, and mixed environments work well
  • A leadership team that will sit down for quarterly business reviews

Our clients are healthcare providers, legal practices, nonprofit organizations, mid-sized businesses, and professional services firms such as accounting, consulting, financial advisors, and architecture and engineering. If your office has that shape, managed IT services lists what you would receive. If you are weighing an MSP against hiring, see in-house IT vs MSP vs IT contractor, and for the questions to ask any provider, how to choose an MSP.

What does working with an MSP look like at NRVPC?

NRVPC was founded in 2006. As we wrote in 2024, "We've kept clients for 10 years." The reason is the routine. Through proactive monitoring, security, and support, we keep your business running smoothly.

The engagement runs in four steps:

  1. Assessment. We review your devices, network, platforms, and security posture, then show you what a managed plan covers and what it costs.
  2. Onboarding. Over 30 days, we bring every device up to the security baseline, document your environment, and introduce your team to the help desk.
  3. Ongoing management. Monitoring, patching, and security run in the background. When your team needs a person, it calls, emails, or requests remote support, and a local engineer responds.
  4. Planning, every quarter. Your leadership and ours review performance, update the roadmap, and plan the next hardware refresh.

Across our client base, that routine produces 95%+ issue-free operation and 99.99% uptime. Those are the numbers a managed service provider should be able to show you.

Key takeaways

  • MSP means managed service provider: a company that owns a defined set of your systems and keeps them running.
  • Managed IT services is what an MSP sells. The two terms describe the same arrangement from the provider's side and the buyer's side.
  • The difference between an MSP and an IT support contractor is how they charge: a scaled flat fee per user versus prepaid hours with overages.
  • An MSP fits a business that will run on a specific set of provided tools. Multiple systems that cannot be automated call for in-house staff or a contractor.
  • At NRVPC, the fit is 20 to 500 employees on company-owned computers, and support runs on one predictable monthly fee, priced per user.

Frequently asked questions

What does MSP stand for?

MSP stands for managed service provider. An MSP takes ongoing responsibility for your systems for a flat monthly fee, rather than billing you by the hour when something breaks.

Is "managed IT services" the same thing as an MSP?

Yes, in practice. Managed IT services is the service; the MSP is the company that provides it. The six-item minimum scope above is a good picture of what the service includes.

What does an MSP do day to day?

An MSP monitors and patches your systems, runs the help desk, manages security tooling and backups, onboards and offboards users, and plans your technology with you.

How does an MSP charge?

A scaled flat monthly fee, usually per user. NRVPC prices per user too, in two plans listed on our pricing page, and project work of 8 hours or more is scoped separately.

What is the difference between an MSP and an IT support contractor?

An MSP is paid to keep your systems running; a contractor is paid for the hours it works, in prepaid blocks with overages. Neither is inferior. If your business can run on a provided set of tools, an MSP fits; if you have multiple systems that cannot be automated, an in-house hire or a contractor fits.

Do I still need an MSP if I have an in-house IT person?

It depends on what that person is administering. Our published position is that multiple systems that cannot be automated are a reason to hire in-house or use a contractor, while a business that runs on a standard set of tools gets broader coverage from an MSP. The comparison is worked through in in-house IT vs MSP vs IT contractor.

Want to see what "managed" would cover at your office?

An IT assessment reviews your devices, network, platforms, and security posture, then shows you exactly what a managed plan includes and what it costs.