In this guide · 7 sections
Short answer
Ad-hoc support suits teams under about five people with simple set-ups. Once you have more staff, customer data or compliance needs, a managed plan that keeps patching, backups, endpoint protection, MFA and leavers under control usually costs less than the incidents it prevents. Many SMEs mix both.
Managed IT vs ad-hoc support at a glance
The difference is not only how you pay. It is whether anyone is responsible for IT between problems.
Ad-hoc (pay per job)
ReactiveHourly or per task
- Pay only when something breaks
- No one checks updates, backups or accounts in between
- Response depends on availability
- Good for one-off projects
Best for: Very small teams with simple, cloud-only set-ups.
Managed IT service
ProactivePer user or device per month
- Regular patching, backups and security checks
- Joiners and leavers handled
- Predictable monthly cost
- Risk of paying for things you do not use
Best for: Teams of five or more, or anyone with customer data or compliance needs.
Hybrid
Common for SMEsLight monthly plan plus projects
- Monthly plan for security basics
- Projects quoted separately
- Clear line between included and extra
Best for: Growing teams that want control of cost.
Our guide to choosing IT support in Singapore covers response times, onsite versus remote, and the questions to ask any provider.
Working out the break-even for your headcount
The honest comparison is the monthly fee against the hours of help you actually use, plus the cost of problems a managed service would have prevented. You can do the first part with a simple formula: monthly managed fee divided by the ad-hoc hourly rate tells you how many hours of ad-hoc help the fee is worth.
| Team size | Managed at S$19/user/mo | Equivalent ad-hoc hours at S$119/hr |
|---|---|---|
| 3 users | S$57 | About 0.5 hours a month |
| 5 users | S$95 | About 0.8 hours a month |
| 10 users | S$190 | About 1.6 hours a month |
| 20 users | S$380 | About 3.2 hours a month |
If your team regularly spends more than that on IT problems, a managed plan is likely cheaper even before counting prevented incidents. Remember to count staff time lost while waiting for a fix, not only the IT bill. Our IT support cost guide lists the typical cost layers.
What a managed IT bundle should include
Many managed offers are a helpdesk with a monthly fee. A useful one maintains the security basics that CSA's Cyber Essentials mark is built around: assets, secure configuration and access, updates, backups and incident response.
Managed IT bundle checklist
Check how licences are handled. If your plan includes Microsoft 365, ask whether you buy it directly or through the provider. Microsoft's business plan comparison lists Business Premium with Intune and Defender for Office 365, which many managed services rely on for device and email protection.
Lock-in risks in managed IT contracts
The most expensive part of a bad managed contract is leaving it.
A fair managed contract
- Global admin and licences in your business's name
- Month-to-month or short minimum term
- Written list of what is included and what is extra
- Handover of passwords, documentation and configs on exit
Lock-in red flags
- Provider holds the only admin account
- Licences resold under the provider's tenant with no transfer plan
- Three-year terms with automatic renewal
- Exit fees to release your data or accounts
The hybrid model many SMEs end up with
Most small businesses do not need a full outsourced IT department. A common pattern is a light monthly plan for the things that must happen every month, plus pay-per-job help for everything else.
List what must happen every month
Updates, backup checks, endpoint alerts, MFA checks, joiners and leavers. This is the managed part.
List what happens occasionally
New laptops, office moves, a website change, an email migration. These are projects or one-off jobs.
Choose a plan sized to the monthly list
Per-user plans scale with headcount; avoid paying for onsite visits you never need.
Agree a rate for everything else
Get an hourly or per-job price in writing so extras are not a surprise.
Review every six months
Compare what you paid in extras against what a bigger plan would have cost, and adjust.
Cybersecurity spend is part of the same decision. Our cybersecurity budget guide breaks down tool and service costs per user.
Do it yourself or get help?
A three-person team fully on Microsoft 365 or Google Workspace, with everyone on newish laptops, can manage with ad-hoc help plus a quarterly self-check. Above five people, or when you hold customer, health or financial data, someone should own the monthly basics.
IT Sorted works remotely and does not provide onsite or hardware support. Protect Standard (S$19 per user a month, minimum 3 users) keeps antivirus, device encryption, updates, password manager and leavers on track. Protect Plus (S$35 per user a month) adds quarterly access reviews and keeps Cyber Essentials evidence current. For one-off jobs, Quick Fix is S$119 for an hour of remote work.
Frequently asked questions
It depends on headcount and risk. For a two or three-person cloud-only team, ad-hoc help is often enough. Once you have five or more staff, customer data, or clients asking about security, a managed plan that keeps updates, backups, endpoint protection and leavers under control usually costs less than the problems it prevents.
A retainer often buys a block of support hours or priority response, and work still happens only when you ask. A managed service takes responsibility for ongoing tasks such as patching, backups and security checks, whether or not you call. Read the contract to see which you are actually buying.
Keep your own Global Administrator account and make sure licences, domains and hosting are in your business's name. Prefer month-to-month or short minimum terms, ask for a written list of inclusions, and agree in the contract that passwords, documentation and configurations are handed over when you leave, at no extra charge.
Not always. Some plans cover only helpdesk and hardware. Check that the bundle includes updates, endpoint protection, MFA, backups with restore testing, and joiners and leavers. These map to the areas in CSA's Cyber Essentials mark. Round-the-clock security monitoring and incident response are usually separate, specialised services.