If you only hear from your IT provider when something breaks or when it is time to renew, you are not getting enough value.
Technology is not a one time setup. It changes. Your staff changes. Your software changes. The risks change too. That is true whether you are running a healthcare practice in St. Louis, a manufacturing company in the Metro East, a professional services firm in Clayton, a nonprofit, or a local government office.
That is why a quarterly IT review matters.
Most business owners and managers know they should be checking in, but they are not always sure what to ask. That is normal. You run the business. You should not have to speak IT for a living.
Here are six simple questions your IT provider should be able to answer every quarter, in plain English.
1. What security problems need attention right now?
Every business has weak spots. The goal is not to pretend they do not exist. The goal is to find them early and deal with them before they turn into downtime, fraud, data loss, or a major mess.
Ask your provider:
Are any systems missing security patches?
Have there been unusual login attempts?
Are any users, devices, or processes creating extra risk?
Are there cybersecurity alerts we should know about?
You do not want a vague answer like everything looks good. You want specifics.
A good IT partner should be able to tell you where your top risks are, what has already been fixed, and what still needs attention. That includes your servers, workstations, firewall, cloud systems, Microsoft 365 environment, and the devices your employees use every day.
2. Have our backups been tested recently?
A backup only matters if it works when you need it.
Plenty of businesses think they are covered because a backup system exists. Then a server fails, ransomware hits, a storm knocks out access, or someone deletes the wrong folder, and everyone finds out the recovery plan was never tested.
That is not the time to figure it out.
Ask:
When was the last full recovery test?
How long would it really take to restore our systems?
Are backups stored separately from our main network?
Are Microsoft 365, Google Workspace, and other cloud apps included?
Who is responsible for restoring what during an outage?
For St. Louis area businesses, business continuity is not just about big disasters. It is about payroll getting processed, patients getting scheduled, orders getting shipped, and staff being able to keep working when something goes wrong.
You need a tested backup and disaster recovery plan, not hope.
3. Where is technology slowing our team down?
Not every IT problem feels like an emergency. Some problems just drain time all day long.
A computer takes too long to start. A line of business app freezes. A video call drops during a sales meeting. A staff member stops using a system because it is too painful. Microsoft 365 is set up, but nobody is using Teams, SharePoint, or OneDrive efficiently.
Those issues cost money, even if nobody opens a ticket.
Ask your provider:
Are we seeing repeat performance issues?
Are any computers or servers aging out?
Which systems get the most complaints?
Are we outgrowing any software or hardware?
Are employees using Microsoft 365 and our other tools effectively?
What should be optimized before it becomes a bigger problem?
Technology should help your team move faster. It should not train them to work around problems.
4. Are we still meeting compliance and insurance requirements?
Compliance is not something you check once and forget.
HIPAA, PCI, cyber insurance, financial regulations, client contracts, and industry standards can all shift over time. A business that was in good shape last year can fall behind without realizing it.
This matters across the Greater St. Louis region. Healthcare organizations, manufacturers, nonprofits, professional services firms, and local government agencies all have different obligations, but they share the same basic problem: somebody eventually asks for proof.
Ask:
Have any requirements changed recently?
Do our policies and documentation still line up?
Do employees need updated security training?
Are there controls we need to strengthen?
Would we be ready if an auditor, insurer, or key client asked for proof?
The cost of falling behind is not just a fine. It can affect insurance claims, legal exposure, customer trust, grant requirements, vendor relationships, and your ability to win business.
5. What should we budget for next quarter?
Good IT planning keeps surprises off your desk.
Your provider should be tracking what is coming, not just reacting to what broke this morning.
That includes:
Aging computers and servers
Expiring warranties
Software renewals
Microsoft 365 license changes
Network upgrades
Security improvements
Backup and disaster recovery improvements
Upcoming vendor price increases
Quarterly planning gives you time to make smart decisions. It lets you spread costs out, avoid rush purchases, and keep technology aligned with your business goals.
No business owner likes surprise IT expenses. Most of them can be prevented with better planning.
6. Where are we falling behind?
This is the question that separates a basic IT vendor from a real partner.
You need someone who can look at your business and say, here is what is changing, here is what matters, and here is what we recommend next.
Ask:
Are there tools or automations we should consider?
Are we behind on cybersecurity best practices?
Are other businesses our size doing something we are not?
Have cyber threats changed in a way that affects us?
Are we using Microsoft 365 and our current systems as well as we could?
Is our technology plan keeping up with our growth?
Technology moves fast. Cybercriminals move faster. Your IT provider should help you keep up without burying you in technical talk.
If these conversations are not happening, that is a red flag.
If your IT provider cannot answer these questions clearly, or if they are not asking to meet with you quarterly, you may not be getting the support your business needs.
You need more than someone who shows up after something breaks.
You need a partner who helps prevent the break in the first place.
At Tigerhawk, we believe business owners and leaders in St. Louis, the Metro East, and across the Greater St. Louis region deserve clear answers, practical planning, and local support that actually understands how the business runs. IT should protect your company, support your team, improve employee efficiency, and help you make better decisions.
If you want a second set of eyes on your current setup, we can help.
For more information, schedule time with Tigerhawk.