Choosing an IT provider is a significant decision for any business. For a manufacturer, it is also a decision about production continuity. Your provider may be supporting the systems used to plan work, store designs, communicate with customers, process orders and keep people connected across more than one site.
That does not mean an IT provider needs to be a machinery engineer. It does mean they should be curious about how your business operates, understand the cost of disruption and know when to involve the specialist responsible for a production system. Use the questions below to test whether a provider is offering a considered service or simply applying an office IT template.
How to use this checklist
Ask each provider for a practical answer, not just a product name. Good answers should connect technology to your production priorities, identify what the provider needs to learn and explain what happens when something goes wrong.
- Ask for examples, service descriptions and recovery test results where appropriate.
- Include your operations, finance and site leads in the conversation, not only the person responsible for office IT.
- Record unanswered questions and make them part of the proposal or onboarding plan.
The questions to ask
The strongest provider will welcome detailed questions. They will also be clear about the parts of your environment they need to investigate further before making a recommendation.
How will you understand what can stop production?
A provider should be able to map the systems and connections that production depends on, not just count laptops and Microsoft 365 accounts. Ask them to explain how they will identify your critical path before making changes.
A good answer includes
- A discovery process covering ERP, production planning, CAD, quality systems, file storage, printing, connectivity and the devices used by site teams
- A clear distinction between business IT and specialist machinery or operational technology, with the right people involved before either is changed
- A record of dependencies, owners and the business impact of losing each important system
Warning sign
Be cautious if the answer is a generic list of products, or if the provider assumes that an office IT checklist tells the whole story about your factory.
What happens if an important system fails during a production run?
The useful question is not whether a provider promises zero downtime. It is whether they have a sensible plan for reducing the impact of an outage and helping your people make safe decisions while it is being fixed.
A good answer includes
- Agreed priorities for production, dispatch, sales, finance and site communications, so the most damaging issues are handled first
- Named escalation routes, clear severity levels and a process for involving your production or operations lead
- Practical recovery options, including workarounds where appropriate and regular updates that help site teams plan
Warning sign
A promise that every ticket is urgent is not a continuity plan. Watch for providers who cannot explain how they prioritise competing issues when your factory and office both need help.
What support response can we actually expect?
Ask for the detail behind the service level, especially if your shifts, sites or customer deadlines do not fit a standard 9 to 5 helpdesk. Response time is only useful when everyone agrees what happens next.
A good answer includes
- A definition of response, ownership and resolution, rather than one headline number that covers every type of request
- Coverage that matches your operating hours, with a clear out-of-hours process for genuinely production-critical incidents
- One route for office users and site teams to request help, plus a named service owner who reviews recurring problems
- A reporting rhythm that shows incidents, response performance, outstanding risks and improvement work
Warning sign
Ask who answers the phone at the moment a line is waiting. If the provider will only discuss a portal, a target response time or an account manager you will never meet, press for the operational detail.
Can you support our office, sites and people in the way they work?
Manufacturing teams often work across offices, warehouses, production areas, vehicles and customer sites. The provider should understand that a shared workstation on a shop floor has different constraints from a laptop used by a finance manager.
A good answer includes
- Support for the full estate, including desktops, laptops, shared devices, mobile users, Wi-Fi, networking, printers and connectivity between sites
- A plan for shift workers and shared devices that does not rely on unsafe shared passwords or make sign-in impractical
- An approach to remote support that respects site safety, change controls and the need to avoid disrupting live work
- A clear answer on when they attend in person and how local visits are prioritised
Warning sign
A provider who only talks about remote support may struggle when a site has a network fault, a failed shared workstation or a time-sensitive issue that cannot be solved from a desk.
How will you protect us from cyber attacks without creating unsafe disruption?
Cyber security for a manufacturer has to protect email, identities, devices, designs, customer information and supplier transactions while fitting around production realities. Ask how security decisions are tested and introduced.
A good answer includes
- Multi-factor authentication, secure email, endpoint protection, patching, least-privilege access and monitoring as an integrated baseline
- A risk-led plan for systems that cannot be patched or changed in the same way as ordinary office devices
- Security awareness for office and site teams, including phishing, invoice fraud and suspicious supplier requests
- A documented incident response plan that explains who is contacted, what is isolated and how production leaders are kept informed
- Help preparing for customer and supply chain requirements such as Cyber Essentials
Warning sign
Be wary of a provider that sells a single antivirus product as a complete cyber-security strategy, or recommends changes without asking how your teams and systems operate.
How do you manage suppliers and third-party access?
Manufacturers regularly work with software vendors, equipment specialists, maintenance partners, logistics providers and customers. That access can be necessary, but it should be controlled, traceable and removed when the work ends.
A good answer includes
- An inventory of supplier accounts, remote access tools and systems each third party can reach
- Named accounts, time-limited access and approval from the right person instead of permanent shared administrator credentials
- A process for reviewing supplier security and checking unexpected requests, especially changes to bank details or payment instructions
- Coordination between your provider and specialist vendors, with clear ownership when an incident crosses supplier boundaries
Warning sign
If nobody owns third-party access, or the answer is to leave a vendor connected indefinitely because it is convenient, there is an avoidable security and continuity risk.
What exactly is backed up, and how quickly can we recover?
A backup that has never been restored is an assumption, not a recovery plan. Ask the provider to describe what would happen after ransomware, accidental deletion, hardware failure or a serious site incident.
A good answer includes
- A written scope covering servers, production-related data, Microsoft 365 data, file shares, applications and configuration information where relevant
- Clear recovery targets in plain English, including which systems return first and how much recent work could be lost
- Protection against attackers deleting or encrypting the backups, with access controls and separation from everyday systems
- Regular, documented restore tests with results shared with you and actions tracked to completion
- A recovery plan that includes communication, alternative working arrangements and the people who approve a return to service
Warning sign
Do not accept the words cloud backup as proof of resilience. Ask where the copies are held, who can delete them, when the last restore test happened and what the quoted service excludes.
How will you deal with our legacy systems?
Older applications, unsupported operating systems and specialist equipment are common in manufacturing. Replacing them may be sensible, but rushing to remove something that production depends on can create a bigger risk.
A good answer includes
- A prioritised register of legacy systems, their business owners, dependencies, support status and known vulnerabilities
- A realistic plan for replacement, isolation, patching or compensating controls, based on operational risk
- Evidence that proposed changes have an owner, budget, testing plan and rollback route
- Honest advice when a system is outside the provider's expertise, with sensible coordination with the specialist supplier
Warning sign
A provider should not ignore old systems, but it should also not promise to modernise everything immediately. Either extreme suggests they are not balancing security with production risk.
How will your service support our next stage of growth?
The right provider should be interested in where the business is going, not only in keeping today's devices running. Growth may mean more users, a second site, a new customer requirement, acquisition or greater use of cloud systems.
A good answer includes
- A technology roadmap tied to business plans, with priorities, dependencies, timescales and costs explained before work starts
- A repeatable approach to onboarding users, devices and sites without creating inconsistent security settings
- Capacity planning for connectivity, identity, storage, licensing and support as the business grows
- Advice on standards and documentation that makes future sites, contracts and supplier relationships easier to manage
Warning sign
If every recommendation is an emergency project, or the provider cannot explain how its service scales, future growth may bring higher costs and more inconsistency rather than better control.
What will we receive for the price, and who is accountable?
Before signing, make sure the proposal is clear enough to compare with another provider. A low monthly fee can become expensive if basic security, project work, site visits or recovery support are all treated as extras.
A good answer includes
- A plain-English list of what is included, what is excluded and how additional work is approved and charged
- Ownership of your documentation, administrator access, data and licences, so you are not locked into the provider
- Named contacts for service management and escalation, not only a sales contact
- A realistic onboarding plan with milestones, responsibilities and the information your team will need to provide
- References or relevant examples from businesses with similar operational complexity
Warning sign
Do not compare providers on price alone. If the scope is vague, accountability is unclear or the contract makes it difficult to leave, the headline saving may not last.
Before you sign, ask what happens next
A good proposal should leave you with a clear starting point. You should know what the provider will review first, which urgent risks need attention, what your team needs to provide and how progress will be reported. You should also know what is deliberately out of scope, especially where specialist production systems or equipment suppliers are involved.
Manufacturing businesses need more than a helpdesk that responds when a laptop stops working. They need a partner who can connect day-to-day support with security, recovery, supplier relationships and the plans that will help the business grow.
Complete 365 for manufacturing brings together Microsoft 365 management, device security, support, monitoring, backups and business continuity for teams working across offices, sites and production environments. The service is designed to give you one accountable partner while keeping specialist operational systems in their proper context.
Looking for a manufacturing IT partner?
Talk to Konnetix about your current systems, support expectations and the risks that matter most to your operation. We can arrange a free Manufacturing IT Review with no obligation.