If you’re paying for managed IT, somewhere in the agreement is a recurring meeting — the quarterly business review, or QBR. Done well, it’s the single best window into what you’re actually getting for the monthly fee. Done badly, it’s a slideshow of ticket counts that could describe any company on earth. Here’s what a useful one covers, and how to tell which kind you’re in.

What the meeting is for

A QBR exists to answer three questions in plain English: What happened last quarter? (and what did it mean), What’s coming? (and what will it cost), and Is technology still pointed where the business is going? It’s a business meeting that happens to be about technology — which is why the right attendees are an owner or manager on your side and an account lead on the provider’s, not two technicians comparing notes.

The look-back: numbers with meaning attached

Raw ticket counts are trivia. A good review interprets:

  • Support patterns — not “147 tickets” but “a third of your tickets trace to the front-office workstations that are due for replacement” or “requests spiked after the new hire class; here’s the onboarding standard that would smooth the next one.” Recurring problems should come with proposed permanent fixes — a provider content to fix the same printer monthly is billing you for a subscription to a problem.
  • What was prevented — patches applied, alerts investigated, failing hardware caught early. Prevention is most of what the fee buys; the review is where it becomes visible.
  • Security evidence, not security vibes — backup restore tests with dates, MFA coverage including the exceptions, training and phishing-simulation results, incidents and near-misses narrated honestly. This is the same evidence your insurer expects, so collecting it quarterly means renewal season stops being archaeology.

The look-forward: no surprises

The second half earns its keep by killing surprises: hardware and software aging out in the next 6–12 months with real replacement numbers (lifecycle, planned); renewals coming due and any price changes arriving with them; recommendations, each with a why and a cost, distinguished clearly from upsells (a good test: does the recommendation trace back to something in the look-back data?); and ten minutes on what’s changing in your business — hiring, moves, new services — because that’s where next quarter’s projects come from. This is the annual plan, kept alive in fifteen-minute installments.

Questions worth asking in the room

  1. What’s our biggest single point of failure right now, and what would it cost to fix?
  2. If ransomware hit tonight, walk me through the recovery — how long, how much data lost, when was that last tested?
  3. What are we spending that you’d cut? (The answer tells you a lot about the partnership.)
  4. What do businesses like ours do that we don’t?
  5. Is anything about our environment making your team’s job harder than it should be?

Red flags, and the other side of the table

Be wary of reviews that are all activity metrics and no interpretation, recommendations that never connect to your data, the same recurring problems appearing quarter after quarter without a permanent fix on offer, or — the classic — QBRs that quietly stop happening once the contract is signed. And a note from our side of the table: the QBR only works as a two-way street. The provider brings the data; you bring where the business is heading. The quarter we learn about the new office after the lease is signed is a quarter everyone pays for.

The bottom line

The QBR is where managed IT proves it’s a partnership rather than a repair service: last quarter interpreted, next year previewed, security evidenced, and zero surprises in between. If your reviews don’t look like that, share this article with your provider — and if that doesn’t change the next one, the meeting has told you what you needed to know anyway.