IT support systems and service-scope comparison worksheet

START HERE

How to use this resource

Record non-sensitive facts about the organization, locations, users, device types, important systems, current support arrangement, recurring concerns, critical operating windows, contacts, and priorities. Do not put credentials, recovery codes, private records, customer data, system exports, or detailed security weaknesses in this worksheet. Ask each provider to explain discovery, onboarding, request handling, responsibilities, access and authentication process, documentation, vendor coordination, monitoring or backup work if proposed, escalation, incident handoff, offboarding, exclusions, and written terms for the same brief.

Open the PDF in a form-capable viewer, save a copy, then fill it in. Reopen your saved copy to check your answers. You can also print the blank pages and write by hand. Your answers are not submitted to PickYourPro.ai.

USE IT RIGHT NOW

IT Support preparation checklist

• List business locations, operating hours, remote-work context, user groups, and the people authorized to coordinate support.
• Describe device types, operating systems, cloud or business applications, network or voice dependencies, and vendors at a non-sensitive level.
• Summarize the current support arrangement, recurring request types, known service gaps, upcoming changes, and important operating windows.
• Define which users, sites, devices, systems, vendors, hours, projects, and after-hours situations are in or out of the requested scope.
• Ask how discovery, onboarding, inventory, documentation, access approval, authentication, request intake, prioritization, and escalation work.
• Clarify provider and client responsibilities for user and device changes, vendors, backups or monitoring if proposed, incidents, and offboarding.
• Keep credentials and sensitive records out of the worksheet; ask how any later secure information exchange will be handled.
• Compare each proposal against the same scope, responsibilities, service process, assumptions, exclusions, complete fee structure, and terms.

Questions to ask an IT support provider

1. How will you discover and document our users, sites, devices, systems, vendors, current support process, and unknowns without collecting unnecessary sensitive data?
2. What requests, incidents, projects, hours, locations, users, devices, systems, and vendors are included, excluded, or handled separately?
3. How do intake, prioritization, response communication, escalation, after-hours handling, provider handoffs, and status reporting work?
4. What access, approval, authentication, credential-exchange, documentation, account ownership, and offboarding practices do you propose?
5. How are backups, monitoring, updates, vendors, user or device changes, incidents, and continuity responsibilities divided if they are in scope?
6. What assumptions, dependencies, implementation steps, service measures, complete fee structure, changes, renewal, cancellation, and written terms apply?

Write down the answers and any exclusions. If two proposals describe different work, clarify the difference before comparing their totals. Leave unanswered points blank until the professional confirms them.

Official references and scope

These are original planning prompts, with AI assistance, prepared by PickYourPro.ai. Official links checked October 11, 2026. This pack has not been independently reviewed by a licensed specialist.

• NIST: Small Business Cybersecurity Corner ↗

  NIST groups small-business resources around topics including teams, cloud security, risks, authentication, phishing, privacy, ransomware, incident response, data and devices, network connections, and supply chain. This worksheet uses those broad topics only to prompt scope and responsibility questions; it is not a security standard or control checklist.

Linked organizations do not endorse PickYourPro.ai. Report a correction.