Eight signs your business has outgrown break-fix IT support
The same printer fault for the fourth time, one person holding every password, and a tender that asks for Cyber Essentials. Eight signs a UK business has outgrown break-fix IT, and what each one costs.
A law firm rang us with a tender in hand. The buyer wanted Cyber Essentials Plus, the deadline was a month away, and nobody in the building knew whether their setup would pass. It did. The call only happened because a buyer asked a question nobody inside had thought to ask. That is how most businesses find out they have outgrown their IT arrangement.
What does "outgrown" actually look like?
Break-fix IT means you pay someone to turn up when something breaks. For five people and a shared printer, that works. Somewhere between 15 and 30 staff it stops, usually without anyone noticing.
The GOV.UK Cyber Security Breaches Survey 2025/2026 found that 43% of UK businesses identified a breach or attack in the last 12 months, and 46% of small businesses. Only 44% of small businesses had a continuity plan covering cyber, and only 47% of all businesses required two-factor authentication. Those are not the numbers of businesses with somebody watching the shop.
The eight signs
1. The same problem keeps coming back
The printer drops off the network every Monday and the fix is "turn it off and on". Break-fix engineers are paid to close the ticket, not to find out why it opened.
What it costs you: staff time, repeatedly. What a slow IT response costs puts it at around £32,500 a year for a 25-person firm when fixes take two hours instead of 20 minutes.
2. One person holds all the passwords
Often it is the office manager, occasionally someone who left two years ago. The router login is in their head and the domain registrar emails go to their inbox.
What it costs you: everything, when they go on holiday or hand in their notice. A domain name whose only login has walked out of the door can take weeks to recover, and your website and email go with it.
3. Nobody knows whether the backups work
The survey found 74% of UK businesses back up to the cloud. Far fewer have restored a whole system under time pressure. An untested backup is a hope, not a plan.
What it costs you: your business, in the worst case. Ransomware does not care how many backup jobs show a green tick, only whether you can get working data back within a day. See the cost of a cyber breach.
4. A customer or a tender asks for Cyber Essentials
A procurement team sends a supplier questionnaire, or a tender lists Cyber Essentials Plus as pass-or-fail. Only 12% of small businesses hold the certification, so you are not alone, but the buyer will not care.
What it costs you: the contract. The law firm above passed in a month because we already knew what the assessor would check. Starting cold, a month is tight. The detail is in what Cyber Essentials actually involves.
5. Staff wait hours for help, so they stop asking
When help takes half a day, people develop workarounds, like emailing documents to personal accounts or sharing logins. Each workaround is a small security hole with a sensible-sounding reason behind it.
What it costs you: risk you cannot see. Phishing was the most common attack type in the survey, affecting 38% of businesses. A member of staff who does not report a suspicious click is how phishing becomes a breach.
6. New starters wait days for a laptop and logins
Someone starts on Monday. Their laptop arrives Wednesday and their email works Thursday. Leavers are worse, because their accounts stay live for weeks while nobody owns the checklist.
What it costs you: around £575 of dead salary per starter on £30,000 a year, plus a data protection complaint waiting to happen on every open leaver account.
7. IT spend is unpredictable
Some months it is £200. Then a server dies and it is £6,000. Equipment gets replaced when it fails, not when it should.
What it costs you: the ability to plan. A fixed price per user per month is boring, which is the point. Our guide to managed IT support costs in the UK sets out what to expect to pay and what should be included.
8. Nobody is looking at security between incidents
Updates happen when someone remembers, and admin rights are handed out to stop people complaining. Only 31% of UK businesses have board-level responsibility for cyber security, which usually means nobody is accountable.
What it costs you: the breach you did not see coming. The survey found 65% of medium businesses identified an attack in the last year. Patching and monitoring between incidents is what stops an attack becoming a breach.
Is managed IT support always the right answer?
No. With fewer than ten staff and nothing that would stop trading if it broke for a day, a good break-fix engineer on a day rate is probably the better deal. With 100 staff and complex systems, you may want an in-house team with a managed provider behind it. We cover that trade-off in managed IT vs in-house IT.
Managed support earns its keep when downtime and risk cost more than the monthly fee. Between 15 and 150 staff, they usually do.
What we do
Systemwork has supported businesses across Leeds and Yorkshire since 2005. Our managed IT support is a fixed monthly price per user, with a service desk staffed by engineers and proactive monitoring that catches many faults before anyone notices them. We take clients through Cyber Essentials, ISO 27001, SOC 2 and NHS DSPT when a customer asks.
When Mr Nice, a Leeds bar, lost their tills on a Friday night, we had them trading within the hour.
If you recognised four or more of the signs above, the free IT audit is the obvious next step. We will tell you which apply and which you can fix yourself. Read how to choose an IT support provider first if you want to know what to ask us.
Frequently asked questions
How many of these signs mean I should switch to managed IT?
Any one of signs two to four is enough to act on, because each can take the business down. If you ticked four or more, your current arrangement is probably already costing more than a managed service would. Fewer than that, and a conversation with your existing provider may be enough.
What is the difference between break-fix and managed IT support?
Break-fix means you pay for time when something goes wrong, usually by the hour. Managed IT support is a fixed monthly fee per user covering monitoring, patching, the service desk and planning. The provider is paid to keep things working, so their incentive matches yours.
How long does it take to move to a managed IT provider?
How long onboarding takes depends mostly on how much documentation exists. Most of that is finding out what you actually have and where the passwords are. Our guide on switching IT provider without downtime sets out the steps.
Can a managed IT provider help us get Cyber Essentials?
Yes, and it is a common reason businesses move to managed support. A provider who already manages your devices has most of the evidence to hand. We took a law firm through Cyber Essentials Plus in a month. Starting cold takes longer, depending on how far your setup is from the five controls.