If you only hear from your IT provider when something breaks, when a renewal is due, or when a server is already down, your public agency is not getting enough value.
Technology is not a one-time setup. Staff changes. Software changes. public expectations change. Cyber risks change too.
That is why a quarterly IT review matters.
Most city administrators, county officials, township supervisors, library directors, school leaders, utility managers, and public works directors know they should be checking in on technology. They are not always sure what to ask. That is normal. You are responsible for public services, budgets, roads, water, records, safety, facilities, boards, and citizens. You should not have to speak IT for a living.
Here are six practical questions your IT provider should be able to answer every quarter, in plain English.
1. What security problems need attention right now?
Every public organization has weak spots. That includes city governments, county offices, township governments, public libraries, park districts, utility departments, public works departments, emergency services, economic development organizations, and school districts across Macomb, McDonough County, and western Illinois.
The goal is not to pretend risk does not exist. The goal is to find problems early and fix them before they become downtime, fraud, data loss, public embarrassment, or disruption to citizen services.
Ask your provider:
- Are any systems missing security patches?
- Have there been unusual login attempts?
- Are any users, devices, or processes creating extra risk?
- Are there security alerts we should know about?
- Are administrator accounts, vendor access, and remote access being reviewed?
You do not want a vague answer like everything looks good. You want specifics.
A good IT partner should be able to tell you where your top risks are, what has already been fixed, and what still needs attention. That matters whether you are supporting City Hall in Macomb, a public library in Bushnell, a public works shop in Colchester, a school district in Monmouth, or a utility office in Carthage.
2. Have our backups and disaster recovery plans been tested recently?
A backup only matters if it works when you need it.
Plenty of organizations think they are covered because a backup system exists. Then ransomware hits, a server fails, a Microsoft 365 mailbox gets compromised, or someone deletes the wrong folder, and everyone finds out the recovery plan was never tested.
That is not the time to figure it out.
Ask:
- When was the last full recovery test?
- How long would it really take to restore our systems?
- Are backups stored separately from our main network?
- Are Microsoft 365, GIS files, financial systems, permitting data, public records, and shared drives included?
- Who is responsible for restoring what during an outage?
- How would we continue essential services if the internet, a server, or a building was unavailable?
You need a tested plan, not hope.
For public agencies, recovery is not just about convenience. It is about payroll, water billing, public safety records, board documents, email, citizen requests, permits, maps, inspections, and the trust people place in local government.
3. Where is technology slowing our staff or citizen services down?
Not every IT problem feels like an emergency. Some problems just drain time all day long.
A workstation takes too long to start. A financial system freezes. A board packet will not sync. A GIS map loads slowly. A video meeting drops during a council, board, or committee meeting. A staff member stops using a system because it is too painful.
Those issues cost taxpayer money, even if nobody opens a ticket.
Ask your provider:
- Are we seeing repeat performance issues?
- Are any computers, servers, switches, or wireless systems aging out?
- Which departments or locations generate the most support requests?
- Are we outgrowing any software, storage, or hardware?
- What should be optimized before it becomes a bigger problem?
Technology should help your staff serve the public more efficiently. It should not train people to work around broken processes.
That applies in large offices and small ones. Whether you are in Macomb, Blandinsville, Industry, Good Hope, Prairie City, Avon, Tennessee, Table Grove, Galesburg, Canton, Quincy, or anywhere in between, slow technology eventually becomes a service issue.
4. Are we still meeting compliance, records, and insurance requirements?
Compliance is not something you check once and forget.
Public agencies have unique responsibilities. Records retention, FOIA response, cyber insurance, grant reporting, financial controls, law enforcement requirements, HIPAA for certain emergency services, FERPA for schools, PCI for online payments, and vendor requirements can all shift over time.
An organization that was in good shape last year can fall behind without realizing it.
Ask:
- Have any requirements changed recently?
- Do our policies and documentation still line up with how we actually operate?
- Do employees need updated cybersecurity training?
- Are there controls we need to strengthen for cyber insurance?
- Would we be ready if an auditor, insurer, grant administrator, or state agency asked for proof?
- Are public records, email, files, and Microsoft 365 data being managed properly?
The cost of falling behind is not just a fine or a failed audit finding. It can affect insurance claims, grant funding, legal exposure, public confidence, and your ability to maintain essential services.
5. What should we budget for next quarter and next fiscal year?
Good IT planning keeps surprises off the agenda.
Your provider should be tracking what is coming, not just reacting to what broke this morning.
That includes:
- Aging computers and servers
- Expiring warranties
- Software renewals
- Microsoft 365 license changes
- Network upgrades
- Security improvements
- Backup and disaster recovery improvements
- Upcoming vendor price increases
- Technology needs tied to grants, capital planning, facilities, utilities, GIS, and infrastructure projects
Quarterly planning gives public leaders time to make smart decisions. It lets you spread costs out, avoid rush purchases, and keep technology aligned with budgets, board priorities, and long-term service needs.
No mayor, administrator, supervisor, director, superintendent, or board member likes surprise IT expenses. Most of them can be reduced with better planning.
6. Where are we falling behind?
This is the question that separates a basic IT vendor from a real partner.
You need someone who can look at your organization and say, here is what is changing, here is what matters, and here is what we recommend next.
Ask:
- Are there tools or automations that could reduce manual work?
- Are we behind on security best practices like MFA, endpoint protection, password policies, or device management?
- Are other local governments or public agencies doing something we are not?
- Have cyber threats changed in a way that affects us?
- Are we using Microsoft 365 as well as we could?
- Could our citizen services, records management, GIS, or internal workflows be improved?
Technology moves fast. Cybercriminals move faster. Your IT provider should help you keep up without burying you in technical talk.
If these conversations are not happening, that is a red flag.
If your IT provider cannot answer these questions clearly, or if they are not asking to meet with you quarterly, you may not be getting the support your public organization needs.
You need more than someone who shows up after something breaks.
You need a partner who helps prevent the break in the first place.
At Tigerhawk, we believe public leaders deserve clear answers, practical planning, and local support that understands how government operations actually work in Macomb, McDonough County, and western Illinois. IT should protect citizen data, support staff, preserve public trust, and help leaders make better decisions with taxpayer resources.
If you want a second set of eyes on your current setup, we can help.
For more information, schedule time with Tigerhawk.
Questions Local Public Agencies Often Ask Next
How often should a Macomb area municipality or public agency review its IT plan?
Quarterly is a practical rhythm for most local governments and public agencies. It is frequent enough to catch security, budget, staffing, and compliance issues before they become urgent, but not so frequent that it overwhelms staff. Larger organizations or agencies with public safety, utilities, or sensitive records may need monthly operational check-ins too.
Do we need Microsoft 365 backup if our city, library, school, or county office already uses Microsoft 365?
Yes, in most cases. Microsoft 365 provides strong platform reliability, but that is not the same as a complete backup and recovery plan for deleted files, compromised accounts, ransomware, retention mistakes, or accidental data loss. Public agencies should know exactly what is protected, how long it is retained, and how quickly it can be restored.
What should western Illinois public agencies include in an IT budget request?
A good IT budget request should include replacement schedules, security improvements, Microsoft 365 licensing, backup and disaster recovery, network equipment, staff training, compliance needs, and support for infrastructure planning or grant-funded projects. The goal is to connect technology spending to service continuity, citizen data protection, and responsible use of taxpayer resources.