What Should a 25–50 Employee Utah Law Firm Budget for Managed IT?
A Utah law firm with 25–50 employees should generally budget approximately $100–$275 per user per month for managed IT services. That equals roughly $2,500–$13,750 per month, or $30,000–$165,000 per year, depending on the number of users, cybersecurity requirements, legal applications, locations, support coverage, and services included.
The lowest price is rarely the most important number. A law firm should compare what each proposal includes, how quickly support requests are answered, whether security is monitored around the clock, and whether the provider understands legal workflows and client-confidentiality obligations.
This guide explains the five factors that determine managed IT pricing, what should be included, and how to compare proposals without overlooking costly gaps.
1. Start With the Number of People, Devices, and Locations
Most managed IT providers calculate part of their fee using the number of supported users. For a law firm, a “user” may include an attorney, paralegal, legal assistant, administrator, or other employee who needs access to email, documents, applications, and technical support.
Using a range of $100–$275 per user per month, estimated pricing looks like this:
| Number of users | Estimated monthly range | Estimated annual range |
|---|---|---|
| 25 | $2,500–$6,875 | $30,000–$82,500 |
| 35 | $3,500–$9,625 | $42,000–$115,500 |
| 50 | $5,000–$13,750 | $60,000–$165,000 |
User count is only the starting point. Pricing may also be affected by the number of workstations, laptops, servers, network devices, offices, remote employees, conference rooms, and mobile devices being supported.
A 30-person firm operating from one office with standardized equipment may cost less to support than a 30-person firm with two locations, remote attorneys, aging servers, inconsistent software, and several specialized legal applications.
2. Define What Is Included in the Monthly Fee
Two proposals with the same monthly price can deliver very different levels of service. A complete managed IT agreement should clearly identify which services are included and which will be billed separately.
Help desk and end-user support
Attorneys cannot afford to wait days for help when they cannot access a matter file, submit an electronic filing, open an email attachment, connect remotely, or use a legal research platform. Confirm whether the agreement includes:
- 24/7 access to a live help desk
- Remote troubleshooting
- On-site support when remote resolution is not possible
- Support for attorneys working outside normal office hours
- Escalation procedures for urgent or complex problems
- Documented response and resolution targets
911 IT clients repeatedly identify responsiveness as one of the most valuable parts of the service. Some report that common issues are resolved within minutes or before they finish the call. A legal-services owner also described the importance of reaching a live technician who could remotely resolve problems involving email, court filing systems, legal research databases, and document workflows.
Proactive monitoring and maintenance
Managed IT should do more than react when something breaks. The monthly fee may include monitoring, patching, software updates, equipment health checks, network maintenance, and early identification of potential failures.
Ask whether the provider monitors systems continuously or only investigates after someone reports a problem. Proactive maintenance can help prevent a small issue from turning into lost billable time, missed deadlines, or a firm-wide outage.
Vendor and application coordination
Law firms often rely on practice-management platforms, document-management systems, billing software, electronic filing portals, legal research services, Microsoft 365, scanners, phones, and secure remote-access tools.
Confirm whether your IT provider will coordinate with those vendors when an issue crosses multiple systems. Without vendor coordination, the firm may spend hours relaying information between an internet provider, software company, phone vendor, and IT technician.
3. Account for Cybersecurity and Client-Data Protection
Cybersecurity is one of the largest variables in managed IT pricing for a law firm. Attorneys and staff work with confidential communications, financial information, personally identifiable information, case strategy, contracts, discovery materials, and other sensitive records.
A basic support plan may fix computers but provide limited security. A security-focused plan may include several layers of protection:
- Multi-factor authentication
- Endpoint detection and response
- Email filtering and phishing protection
- 24/7 threat monitoring
- Microsoft 365 security configuration
- Conditional Access policies
- Device and disk encryption
- Security awareness training
- Vulnerability scanning and patch management
- Backup monitoring and restoration testing
- Incident response planning
- Cyber insurance readiness support
These services increase the monthly investment, but excluding them can leave the firm paying separately for security tools—or operating without controls that clients, insurers, and business partners increasingly expect.
Review the provider's cybersecurity services and ask for a written list of the controls included in the proposed monthly fee.
Questions to ask about security pricing
- Is security monitoring provided 24 hours a day?
- Are endpoint protection and threat-response tools included for every device?
- Does the provider manage Microsoft 365 security settings?
- Are employee phishing tests and security training included?
- Are incident-response services included or separately billed?
- Does the provider help complete cyber insurance questionnaires?
- Are security assessments included annually or charged as projects?
4. Calculate Backup, Recovery, and Downtime Requirements
The cost of managed IT also depends on how quickly the firm must recover after a cyberattack, server failure, accidental deletion, internet outage, or regional emergency.
Every law firm should define two numbers:
- Recovery Time Objective: The maximum amount of time the firm can tolerate being unable to use a system.
- Recovery Point Objective: The maximum amount of recently created or changed data the firm can tolerate losing.
A firm that can tolerate one day of downtime may require a less expensive solution than a firm that needs critical systems restored within one or two hours. Faster recovery typically requires more redundancy, cloud infrastructure, backup copies, monitoring, testing, and planning.
Ask whether the managed IT proposal includes:
- Automated local and cloud backups
- Immutable or otherwise protected backup copies
- Microsoft 365 data backup
- Regular restoration testing
- A written disaster-recovery procedure
- Recovery support after ransomware or equipment failure
- Business-continuity planning for remote work
Learn more about business continuity services and cloud services before comparing backup line items. A low-cost backup service is not valuable unless the firm has verified that its files and systems can actually be restored.
5. Include Strategic Planning and Technology Lifecycle Costs
A mature managed IT relationship should help the firm plan—not merely respond to tickets. Strategic services may include technology budgeting, equipment replacement schedules, cybersecurity roadmaps, Microsoft 365 planning, vendor reviews, and leadership meetings.
This is often described as virtual CIO, technology advisory, or strategic IT planning. It is especially useful for a 25–50 employee law firm because technology decisions at that size affect hiring, remote work, office expansion, cybersecurity, client service, and operating costs.
Ask whether your monthly agreement includes:
- Quarterly technology reviews
- An annual IT budget
- A three-year equipment lifecycle plan
- Security and risk reporting
- License and vendor reviews
- Planning for office moves, mergers, or growth
- Recommendations tied to the firm's business priorities
Without a roadmap, the firm may face surprise expenses when several computers, servers, licenses, or network components need replacement at the same time.
What Is Usually Not Included in the Monthly Price?
Even a comprehensive fixed-fee agreement may exclude certain one-time expenses. Before signing, request a written list of exclusions and project rates.
Common exclusions can include:
- New computers, servers, firewalls, and networking equipment
- Microsoft, legal software, and third-party licensing
- Major office moves or new-location buildouts
- Large cloud migrations
- After-hours project work
- Cabling and electrical work
- Data recovery from physically damaged equipment
- Remediation of pre-existing technical debt
- Special compliance assessments or penetration testing
A transparent provider should explain these costs before work begins. Ask how projects are approved, whether estimates are provided in advance, and which situations can trigger additional charges.
How to Compare Managed IT Proposals for a Law Firm
Do not compare proposals using the monthly total alone. Use the following five-part evaluation framework.
1. Compare scope
Place each proposal side by side and mark whether help desk, on-site service, monitoring, security, backups, Microsoft 365 management, vendor coordination, and strategic planning are included.
2. Compare response commitments
Ask who answers the phone, whether technicians are available 24/7, how urgent tickets are prioritized, and when on-site support is dispatched.
3. Compare security controls
Request a specific list of tools and services. “Cybersecurity included” is too vague. The proposal should name the protections, monitoring, training, reporting, and incident-response responsibilities.
4. Compare legal-industry experience
Ask how the provider has supported attorneys, court filing, document access, secure remote work, Microsoft 365, confidential client information, and legal software vendors.
5. Compare exclusions and contract terms
Review onboarding fees, project rates, annual increases, term length, cancellation requirements, equipment ownership, documentation access, and offboarding responsibilities.
A Practical Example for a 35-Employee Law Firm
Consider a Salt Lake City law firm with 35 employees, one office, several remote attorneys, Microsoft 365, a cloud-based practice-management platform, and strict expectations for availability and security.
At $100–$275 per user, its preliminary managed IT budget would be approximately $3,500–$9,625 per month. The final price would depend on whether that amount includes 24/7 help desk access, on-site service, advanced cybersecurity, Microsoft 365 administration, backup and recovery, security training, vendor coordination, and strategic planning.
A cheaper proposal might exclude several of these services. Once separate security subscriptions, hourly projects, emergency support, backup services, and consulting are added, the apparent savings may disappear.
The more useful question is not, “Which provider has the lowest per-user price?” It is, “Which proposal gives our firm the support, security, recovery capability, and accountability we need at a predictable total cost?”
What Results Should Your Firm Expect?
A strong managed IT relationship should produce operational improvements—not simply a monthly invoice. Useful outcomes include:
- Faster support when attorneys and staff cannot work
- Fewer recurring technology problems
- Reduced downtime and lost billable time
- More predictable technology spending
- Stronger protection for confidential information
- Verified backup and recovery capabilities
- Clearer technology planning
- Less time spent coordinating multiple vendors
In feedback collected from 911 IT clients, recurring themes include fast response, patient technicians, proactive problem-solving, remote resolution, local on-site support, and the feeling of having an in-house IT department without carrying the overhead of building one. A partner at a legal-industry client also described the value of using one provider for interconnected IT, phone, and hosting needs, with remote service helping minimize downtime.
Managed IT Pricing Checklist for Utah Law Firms
Before approving a proposal, confirm that you can answer each of these questions:
- What is the exact monthly cost for 25, 35, and 50 users?
- Which tools and licenses are included?
- Is 24/7 support included?
- Will a live technician answer urgent calls?
- Is local on-site support included or separately billed?
- Which cybersecurity controls are included?
- Are Microsoft 365 security and administration included?
- Are backups monitored and restoration-tested?
- Does the provider support legal applications and vendors?
- Are quarterly strategy and budgeting meetings included?
- What work is considered a separately billed project?
- What are the contract, renewal, and cancellation terms?
Frequently Asked Questions
Is managed IT priced per user or per device?
Many providers use per-user pricing, per-device pricing, or a combination of both. Per-user pricing can be easier to budget when each employee uses several devices. Ask the provider to explain exactly how users, shared workstations, servers, network equipment, and remote devices are counted.
Why is there such a wide managed IT pricing range?
The range reflects differences in support hours, cybersecurity, backup and recovery, cloud management, on-site service, compliance assistance, strategic planning, and the condition of the firm's existing systems.
Can a law firm buy help desk support without cybersecurity?
Some providers offer basic support plans, but separating support from security can create gaps. The provider fixing day-to-day issues should also understand how identities, devices, email, backups, and client data are being protected.
Will managed IT eliminate all additional technology costs?
No. Hardware, software licenses, major migrations, office moves, cabling, and substantial projects may be billed separately. A fixed-fee agreement should make routine support and maintenance predictable while clearly identifying exclusions.
How long does onboarding take?
Timing depends on the firm's size, locations, documentation, security condition, vendors, and existing provider cooperation. A careful onboarding process should include discovery, documentation, security review, tool deployment, user communication, and a prioritized remediation plan.
Should a law firm choose the lowest-priced provider?
No. The best value comes from comparing total scope, response, security, recovery, expertise, and exclusions. A lower monthly fee can become more expensive if the firm experiences recurring downtime, separate project bills, weak security, or slow support.
Get a Managed IT Estimate for Your Law Firm
For a 25–50 employee law firm, managed IT is likely to cost between $2,500 and $13,750 per month based on a planning range of $100–$275 per user. The right position within that range depends on your technology environment, required security controls, recovery objectives, locations, applications, and expectations for support.
911 IT provides local Salt Lake City-area support, 24/7 access to technicians, cybersecurity services, Microsoft cloud expertise, proactive planning, and fixed-fee managed IT options. Review our Salt Lake City IT support services or schedule a discovery call to receive an estimate based on your firm's actual users, systems, risks, and priorities.
