Managed services or in-house IT: the real comparison for an SMB

“We’ll hire an IT person.” It is many executives’ reflex answer when IT becomes a topic: one outage too many, ransomware at a peer company, a departure that leaves a server with nobody to look after it. Sometimes it is the right answer. But it is rarely costed all the way through, and even more rarely compared with what a managed services contract actually covers.

Here is the comparison we walk through with SMB owners, in Morocco and elsewhere, before they decide. The point is not that one option always wins, but to ask the right questions.

What an in-house position really costs

Salary is only the start. To compare fairly, add up:

• Social charges and benefits on top of gross salary.
• Holidays and absences: during those periods, nobody is watching anything.
• Continuous training, essential in a field where threats, versions and cloud offers change every year.
• Tools: monitoring, backup, antivirus or EDR, endpoint management, ticketing. A managed service provider pools them; in-house, you buy and maintain them.
• Recruitment and replacement: the time it takes to find the right profile, onboard them, and start again if they leave.

And above all no backup: a single IT person covers neither nights, nor weekends, nor their own holidays. The day they leave, knowledge of your infrastructure leaves with them if nothing has been documented.

The skills problem

Sooner or later, an SMB needs skills in networking, firewalls, security, Microsoft 365 or Google Workspace, backup, virtualisation, IP telephony and sometimes ERP. No single person masters all of these to the same level. In practice, the in-house IT person becomes a generalist: very good at users’ day-to-day needs, but discovering the firewall configuration or the disaster recovery plan on the day they need it.

This is not about talent. It is about volume: you need to have seen dozens of environments to quickly recognise an attack in progress, a misconfigured backup or an undersized internet link.

Security illustrates this well. A well-tuned firewall, MFA on email, isolated backups and account monitoring all require constant attention. A lone IT person, absorbed by day-to-day requests, rarely has time for it. A managed services team applies the same rules across all its clients and fixes everywhere as soon as a new threat appears.

What a managed services contract covers

A team of engineers with complementary skills (network, security, cloud, telephony), 24/7 monitoring, tools already in place, written procedures and documentation that belongs to you. All for a monthly fee known in advance, usually below a fully loaded salary for an SMB under 100 endpoints. Our managed IT pricing ranges for Morocco explain how that fee is calculated.

In practice, a serious contract includes at least:

• user support, remote and on site;
• monitoring of servers, network and backups, with alerts actually handled;
• scheduled updates and security patches;
• a written response-time commitment, not just a promise;
• a monthly report that management can read, not only a technician.

Side-by-side comparison

Criterion	Single in-house IT person	Managed services	Hybrid model
Daily physical presence	Yes	By appointment or on incident	Yes, through the point of contact
Nights, weekends, holidays	No, unless on-call is organised	Yes, 24/7 monitoring	Yes
Breadth of skills	One person, generalist profile	A specialised team	A team plus field knowledge
Cost	Loaded salary + tools + training	Predictable monthly fee	Lighter internal role + fee
Continuity if someone leaves	High risk	Documentation and team remain	Low risk
Business knowledge	Very good	Built over time, starting with the audit	Very good
Control	Direct	Through contract and KPIs	Direct, with expert backing

The table shows that the real question is not “in-house or outsourced” but “which part of IT needs someone on site every day”.

What managed services do not replace

Daily proximity and fine knowledge of the business. Someone who knows every user, every business application and every work habit solves many small issues before they become tickets. Beyond 150 to 200 endpoints, or in organisations with heavy application stakes (custom ERP, industrial production, several sites), an internal IT manager becomes relevant. That person does not replace external expertise, though: they steer it.

The model we recommend most often

Hybrid: an internal point of contact (often an administrative manager or a technician) who knows the users and priorities, backed by a managed service provider that brings expertise, monitoring and on-call. The contact keeps control, we carry the technical load.

For this model to work, the split must be written down from day one:

• The point of contact welcomes new starters, passes on requests, knows business priorities and approves changes.
• The provider administers servers, network, security and cloud, monitors continuously, applies patches and handles incidents.
• Both meet every month around a shared dashboard: incidents, backups, security, upcoming projects. Our article on IT monitoring KPIs details what it should contain.

Common mistakes

• Comparing a salary with a quote without adding charges, tools, training and replacement: the comparison is skewed from the start.
• Hiring a junior profile to “do everything”, then handing them security and the firewall with no training or support.
• Outsourcing without keeping control: a contract with no KPIs, no reports and no documentation handed over simply creates a new dependency.
• Leaving administrator access with one person, internal or external. Critical passwords must be held by the company.
• Ignoring reversibility: before signing, check how you get the documentation and access back if you change your setup.

Checklist: how to decide

• List the incidents of the last twelve months, the time spent and what they cost in lost activity.
• Write down your real working hours: do you work evenings, weekends, across several sites?
• List the skills you need: network, security, cloud, telephony, business applications.
• Cost a complete in-house position: loaded salary, tools, training, holiday cover.
• Ask for a managed services quote based on a real inventory, not just a headcount.
• Identify who, internally, could act as the point of contact.
• Check that documentation and access belong to you, whichever option you choose.

To compare providers themselves, our 12-question checklist for choosing an MSP completes this exercise.

How we do it

Everything starts with the initial audit, offered free of charge: one day on site to inventory your estate, test your backups, check access and understand how your teams work. Our IT audit framework describes what we look at.

From there, we hand you a costed comparison of the three options (in-house, managed services, hybrid) and a prioritised action plan. If you entrust operations to us, the managed IT services contract takes over that scope: 24/7 monitoring, critical incidents handled in under 15 minutes, a reply to requests within 24 business hours and documentation that remains yours. If you already have an IT person, we work with them, not instead of them.

To go further, read our complete guide to managed IT services in Morocco.

Browse some of our case studies to see this kind of support in practice, then request your free audit.