Co-managed IT for legal businesses pairs your internal IT staff with an external managed service provider who delivers 24-7 monitoring, strategic planning, cybersecurity oversight, and specialized legal technology support. Your in-house team handles day-to-day user requests while the MSP provides enterprise-grade infrastructure management, compliance expertise for Utah State Bar confidentiality rules, and one-hour-or-less emergency response when critical systems fail during filing deadlines.
What exactly does co-managed IT mean for a law firm?
Co-managed IT creates a partnership between your existing IT person or small team and an external provider. Your internal staff remains the first point of contact for routine requests - password resets, printer issues, basic software questions - while the MSP operates as the strategic backbone handling infrastructure, security, and complex projects.
This model works particularly well for mid-sized law firms with 15 to 75 employees who've outgrown break-fix support but aren't ready to build a full internal IT department. Your office manager or paralegal who "handles IT" gets professional backup. Your solo IT administrator gets peer consultation and after-hours coverage.
The division of responsibilities is customizable. Some firms keep all user-facing support internal while the MSP manages servers, firewalls, backup systems, and security monitoring. Others split help desk duties, with the MSP taking overflow tickets or handling complex technical issues that exceed internal expertise.
Christian, managing partner at a Salt Lake City legal practice, explains the consolidation benefit: "We love that 911 IT provides IT, phone, and hosting services. I didn't realize how interconnected those services were and what a pain it was to try and work with three different providers before we started working with 911 IT."
The key advantage is continuity - your internal person knows the attorneys, understands case management workflows, and can walk to someone's desk. The MSP brings depth: specialized legal software expertise, compliance knowledge, vendor management leverage, and 24-7 monitoring that catches problems at 2 a.m. before they disrupt morning court filings.
Co-managed IT gives law firms enterprise capabilities without enterprise overhead.
How does co-managed IT address Utah State Bar technology competence requirements?
Utah Rules of Professional Conduct Rule 1.1 requires lawyers to maintain competence in technology relevant to their practice. Rule 1.6 mandates reasonable efforts to prevent unauthorized access to client information. Co-managed IT helps firms meet both obligations by providing documented security controls and professional IT oversight that demonstrates reasonable care.
The MSP component delivers continuous security monitoring, regular vulnerability assessments, and documented incident response procedures - evidence that the firm takes technology obligations seriously. When a data breach occurs at another firm, your malpractice carrier asks what controls you have in place. Co-managed IT provides documented answers.
For firms handling IOLTA accounts, the model ensures segregated financial systems receive appropriate security attention. The MSP monitors trust account servers separately, implements multi-factor authentication for financial access, and maintains audit logs that satisfy Utah State Bar IOLTA rules and Division of Consumer Protection oversight.
U.S. District Court for the District of Utah CM/ECF filing requirements demand reliable systems during critical deadlines. Co-managed IT ensures redundant internet connections, backup workstations, and emergency support when your document management system crashes two hours before a filing deadline. Your internal IT person handles the immediate user issue while the MSP troubleshoots the underlying infrastructure problem simultaneously.
Utah Rules of Civil Procedure e-discovery obligations require defensible data retention and retrieval capabilities. The MSP designs and maintains backup systems that can produce emails and documents from specific date ranges, meeting litigation hold requirements without burdening internal staff with complex restoration procedures.
Co-managed IT transforms Bar technology requirements from aspirational guidelines into documented operational reality.
What does the day-to-day workflow look like with co-managed IT?
Daily operations follow a clear escalation path. An associate's Outlook won't connect to the case management system. She calls your internal IT contact first. If it's a credential issue or local workstation problem, internal IT resolves it immediately. If it's a server connectivity issue or database corruption, internal IT opens a ticket with the MSP while keeping the associate informed.
The MSP monitors all firm systems continuously through remote management tools. When backup jobs fail, disk space runs low, or security threats appear, the MSP addresses them proactively - often before internal IT or end users notice. Monitoring alerts route to the MSP's 24-7 helpdesk, ensuring someone responds even when your internal person is in a deposition or on vacation.
Strategic planning happens collaboratively. The managing partner wants to open a second office location. Internal IT understands the workflow requirements and user preferences. The MSP designs the network architecture, evaluates VoIP phone systems, and manages the technical implementation. Both teams attend planning meetings, each contributing their expertise.
Vendor management becomes streamlined. When your practice management software vendor releases an update, the MSP tests it in a sandbox environment, coordinates the deployment schedule with internal IT, and handles any compatibility issues with other systems. Your internal person doesn't spend three days troubleshooting a failed update alone.
Security incidents follow a defined protocol. The MSP's monitoring tools detect a potential ransomware signature on an attorney's laptop at 11 p.m. They isolate the device from the network immediately, notify internal IT, and begin forensic analysis. By morning, internal IT can tell affected attorneys exactly what happened and what data remains secure.
Documentation flows both directions. Internal IT logs user requests and resolutions in a shared ticketing system. The MSP documents all infrastructure changes, security updates, and strategic recommendations. Both teams access the same knowledge base, ensuring continuity when either handles an issue.
The workflow eliminates the isolation and overwhelm that single-person IT departments experience in law firms.
How much does co-managed IT cost compared to hiring additional IT staff?
Industry-standard co-managed IT services typically range from $75 to $150 per user per month, depending on service scope and firm complexity. For a 30-attorney firm, that's approximately $2,250 to $4,500 monthly. This cost covers 24-7 monitoring, strategic vCIO services, security management, backup oversight, vendor coordination, and unlimited support for infrastructure issues.
Compare that to hiring a second full-time IT person. A mid-level IT administrator in Salt Lake City commands $65,000 to $85,000 annually in salary, plus benefits (health insurance, 401k, paid time off) adding another 25-30%. Total compensation reaches $81,250 to $110,500 per year, or $6,770 to $9,208 monthly. That second person still can't provide 24-7 coverage, specialized security expertise, or vendor management leverage.
The cost comparison becomes more favorable when you factor in what co-managed IT includes that a single hire cannot provide. Enterprise-grade security tools - endpoint detection and response, SIEM logging, vulnerability scanning - would cost $25 to $75 per user monthly if purchased separately. Backup and disaster recovery infrastructure adds another $10 to $30 per user monthly. The MSP includes these tools in their service delivery.
A 30-person law firm typically saves $2,000 to $4,500 monthly with co-managed IT versus hiring a second full-time IT employee, while gaining 24-7 coverage and specialized legal technology expertise.
Co-managed IT also eliminates hiring risk. If your second IT person leaves after six months, you face recruiting costs, knowledge transfer gaps, and coverage holes during the search. The MSP maintains continuity regardless of individual staff turnover on either side.
For firms with seasonal workload variations - litigation peaks, tax season for business law practices - co-managed IT scales support without adding fixed payroll costs. You get extra help during trial preparation without paying for unused capacity during slower months.
The financial model shifts IT from a fixed overhead cost to a predictable operational expense that scales with firm growth.
Which Salt Lake City providers offer co-managed IT for legal practices?
Salt Lake City's legal IT market includes several providers capable of co-managed arrangements, though capabilities and legal industry focus vary significantly. Verified local providers include Executech, Wasatch I.T., Nexus IT Consultants, INTELITECHS, ProLink IT, and Qual IT, each with different strengths and service models.
When evaluating providers, law firms should distinguish between general MSPs adapting their standard offering and providers with dedicated legal technology expertise. Questions about case management system integration, legal-specific compliance requirements, and trust account security controls quickly reveal depth of experience.
Large national legal IT providers operate in the Salt Lake market, but small and mid-sized firms often find themselves lost in ticket queues designed for 200-attorney firms. At enterprise-scale providers, your 30-person practice is one account among hundreds, assigned to rotating junior technicians who lack context about your specific workflows and deadlines.
Single-person IT consultants offer personalized attention but lack the infrastructure for true 24-7 monitoring and support. When that individual takes vacation or handles another client's emergency, your coverage disappears. Co-managed IT requires a provider with sufficient team depth to maintain continuity.
911 IT occupies the optimal middle ground for Salt Lake City legal practices. Founded in 2004, the company delivers enterprise-grade capabilities - 24-7 monitoring, one-hour-or-less emergency response, comprehensive security tools - while maintaining the client relationships that let them know your attorneys by name and understand your case management workflows.
Janet, a local attorney, describes the relationship: "911 IT is the absolute BEST company I have ever worked with. As a tech-impaired geezer, I struggle with most computer and online functions. However, as a lawyer, I must navigate the internet, log into legal research databases, operate the court's electronic filing system, manage my email, and download various documents." The firm's patient, knowledgeable support helped her maintain Bar technology competence throughout her practice.
The company's co-managed IT services integrate with existing internal IT staff while providing the specialized legal technology expertise that general business IT support cannot match. Their 100% satisfaction guarantee and flat-rate transparent pricing eliminate the financial uncertainty that makes law firm managing partners hesitant about IT investments.
For firms also operating in Phoenix or Wyoming markets, 911 IT's three-state service area ensures consistent support across multiple office locations - a significant advantage over providers limited to the Salt Lake City metro area.
The right co-managed IT provider becomes a strategic partner in your firm's growth, not just a vendor answering tickets.
What happens when internal IT staff resist sharing responsibilities with an MSP?
Resistance from existing IT staff is the most common implementation challenge in co-managed arrangements. Your internal person may view the MSP as a threat to job security, a criticism of their capabilities, or an intrusion into their domain. Addressing these concerns directly during the transition determines whether co-managed IT succeeds or creates ongoing friction.
Successful implementations frame the MSP as force multiplication, not replacement. Your internal IT person gains access to specialized expertise, enterprise-grade tools, and peer consultation they couldn't access working alone. Instead of being the single point of failure who can never take vacation, they become part of a larger team with backup coverage and shared responsibility.
Define roles clearly from the start. Document which responsibilities remain with internal IT, which transfer to the MSP, and which require collaboration. Ambiguity creates territorial disputes. Clarity creates productive partnership. Most firms find internal IT appreciates offloading after-hours emergencies, complex security management, and vendor escalations while retaining direct user relationships and workflow optimization.
Include internal IT in provider selection and onboarding. When your IT person helps evaluate MSP candidates and participates in transition planning, they develop ownership of the relationship rather than feeling bypassed. Their technical input during selection often identifies compatibility issues managing partners wouldn't recognize.
Some resistance signals legitimate concerns about provider quality. If your internal IT person objects because the proposed MSP lacks legal industry experience, uses outdated tools, or has poor response times, listen carefully. They may be protecting the firm from a bad partnership.
The transition typically takes 60 to 90 days for both teams to establish working rhythms, communication protocols, and mutual trust. Early friction often resolves once internal IT experiences the benefits - backup during emergencies, specialized expertise for complex projects, and professional development through peer interaction.
Firms occasionally discover their internal IT person genuinely cannot work collaboratively with external partners. In those cases, co-managed IT clarifies a personnel issue that would have surfaced eventually. Most often, initial resistance transforms into appreciation once the partnership demonstrates value.
Co-managed IT works best when both teams view each other as colleagues solving shared problems, not competitors protecting territory.
How do you choose between co-managed IT and fully managed services?
The decision between co-managed and fully managed IT depends on three factors: current internal IT capabilities, firm size, and strategic technology priorities. Understanding these variables helps law firms select the model that delivers optimal value without paying for unnecessary overlap or leaving critical gaps.
Firms with existing internal IT staff who demonstrate technical competence and collaborative mindset are ideal co-managed candidates. If your IT person successfully manages day-to-day operations but struggles with strategic planning, security expertise, or after-hours coverage, co-managed IT fills those specific gaps while preserving the institutional knowledge and user relationships your internal person provides.
Firm size creates natural inflection points. Practices with fewer than 15 employees rarely justify dedicated internal IT staff, making fully managed IT services more cost-effective. Firms with 15 to 75 employees often benefit from co-managed arrangements that combine internal responsiveness with external expertise. Larger firms may need multiple internal IT staff plus MSP partnership for specialized functions.
Strategic priorities matter significantly. Firms planning aggressive growth, opening new locations, or implementing complex technology projects benefit from co-managed IT's collaborative planning model. Practices focused on operational stability with minimal technology change may prefer fully managed services that handle everything without requiring internal coordination.
Budget considerations influence the choice. Co-managed IT typically costs less than fully managed services because internal staff handles routine support, reducing the MSP's workload. However, you must account for internal IT salary and benefits when calculating total technology costs. Some firms discover fully managed services cost less than maintaining even a single internal IT position.
The comparison table below outlines key decision factors:
| Factor | Co-Managed IT | Fully Managed IT |
|---|---|---|
| Best for firm size | 15-75 employees | Under 15 or over 75 employees |
| Internal IT requirement | At least one competent IT person | No internal IT needed |
| Monthly cost per user | $75-$150 plus internal salary | $125-$250 all-inclusive |
| Response model | Internal first, MSP for escalation | MSP handles all requests directly |
| Strategic planning | Collaborative between teams | MSP-led with partner input |
| Best for | Firms with good internal IT wanting depth | Firms wanting complete IT outsourcing |
Many firms transition between models as circumstances change. A practice might start with fully managed services, hire internal IT as they grow, then shift to co-managed arrangements. Others move from co-managed back to fully managed when internal IT staff leave and they decide outsourcing everything makes more sense.
The right model aligns with your firm's current reality and near-term trajectory, not an idealized future state.
Frequently asked questions
Can co-managed IT handle specialized legal software like Clio or Westlaw integration?
Yes, experienced legal IT providers manage case management systems, legal research database integration, document management platforms, and practice management software as core competencies. They coordinate with software vendors for updates, troubleshoot integration issues between systems, and optimize performance for litigation document loads. The MSP component of co-managed IT typically brings deeper legal software expertise than general business IT support can provide.
What happens if the MSP and internal IT disagree on technical decisions?
Effective co-managed agreements establish decision-making frameworks upfront, typically with the MSP holding final authority on security and infrastructure decisions while internal IT leads on workflow and user experience choices. Most disagreements resolve through collaborative discussion when both teams prioritize firm needs over territorial concerns. Escalation paths to managing partners exist for rare situations requiring executive decision-making, but well-matched partnerships rarely need them.
How quickly can co-managed IT respond to emergencies during trial preparation?
Response times depend on service level agreements, but legal-focused providers typically guarantee one-hour-or-less response for critical emergencies affecting court deadlines or client deliverables. The 24-7 monitoring component often detects and resolves infrastructure issues before they impact users. For trial preparation emergencies, having both internal IT for immediate user support and MSP infrastructure expertise simultaneously addressing problems significantly reduces resolution time compared to single-person IT support.
Does co-managed IT work for solo practitioners or very small firms?
Co-managed IT makes most financial sense for firms with at least one part-time or full-time internal IT resource, typically firms with 15 or more employees. Smaller practices and solo practitioners benefit more from fully managed IT services where the MSP handles all technology responsibilities directly. The co-managed model's value comes from augmenting existing internal capabilities, not replacing them entirely.
Can we switch from fully managed IT to co-managed if we hire internal staff later?
Yes, most MSPs offer flexible service models that adjust as firm needs change. Transitioning from fully managed to co-managed IT involves redefining responsibilities, adjusting service scope, and typically reducing monthly costs since internal staff assumes some duties. The reverse transition also works - firms sometimes move from co-managed back to fully managed when internal IT staff leave and they decide not to replace them. Service flexibility accommodates firm growth and changing resource strategies.
How does co-managed IT handle confidentiality for attorney-client privileged information?
Professional legal IT providers operate under strict confidentiality agreements and implement role-based access controls that limit MSP staff access to only systems necessary for infrastructure management, not case content or client files. They maintain their own cybersecurity insurance and follow documented data handling procedures that satisfy Bar confidentiality obligations. Many MSPs serving legal clients undergo regular security audits and maintain cybersecurity certifications demonstrating their commitment to protecting sensitive information throughout the co-managed relationship.
