Clarity on scope
A good agreement states exactly what is covered, what is not and how out-of-scope requests are handled.
Transparent reporting
Ask what you will see regularly: incidents, response times, patch status and recommendations, not just an invoice.
Security as standard
Understand how the provider secures its own tooling and access to your systems, and how it handles incidents.
Fit and communication
You will work together for years. Assess how they explain problems and whether they challenge you constructively.
Key takeaways
- Insist on clear scope
- Ask for regular reporting
- Check their own security
- Test communication early
