Co-Managed vs. Fully Outsourced IT

As accounting firms grow, technology becomes more complex. Microsoft 365, cybersecurity, cloud applications, compliance expectations, AI adoption, and business continuity all require specialized expertise that may exceed the capacity of a small internal IT team.

For many firms throughout Los Angeles County and Greater Los Angeles, the decision is no longer whether to outsource IT. It is determining the right balance between internal resources and external expertise.

A co-managed IT model allows your internal IT staff and Managed IT Services Provider to work together, while a fully managed model places primary responsibility for day-to-day IT operations, cybersecurity, and strategic planning with the provider.

The right choice depends on your firm’s structure, technology maturity, staffing, and long-term business goals.

Why This Decision Matters

Technology is no longer a support function.

It directly affects:

• Client service
• Employee productivity
• Cybersecurity
• Regulatory readiness
• Business continuity
• AI adoption
• Long-term growth

Choosing the wrong operating model can create unnecessary costs, duplicated responsibilities, or gaps in accountability.

Choosing the right model allows leadership to focus on serving clients while ensuring technology supports the firm’s objectives.

The Three IT Operating Models

Most accounting firms fall into one of three categories.

Model #1 — Internal IT Only

Some firms rely entirely on an internal IT employee or small technology team.

Advantages include:

• Familiarity with internal operations.
• Immediate availability.
• Close relationships with employees.

Potential limitations include:

• Limited specialized expertise.
• Difficulty providing 24×7 monitoring.
• Vacation and staffing coverage challenges.
• Limited cybersecurity resources.
• Less strategic planning capacity.

Executive Planning Tip

Internal IT teams are often strongest when they can focus on projects, user relationships, and business improvement rather than handling every operational responsibility alone.

Model #2 — Fully Managed IT Services

In a fully managed model, a Managed IT Services Provider assumes responsibility for most day-to-day technology operations.

Typical responsibilities include:

• Help desk support
• Cybersecurity
• Microsoft 365 administration
• Network management
• Backup and disaster recovery
• Strategic technology planning
• Vendor management
• Monitoring and maintenance

This model is often appropriate for firms without dedicated internal IT staff or organizations seeking a single technology partner.

Decision Table

Model #3 — Co-Managed IT

Co-managed IT combines the strengths of internal IT with the specialized capabilities of a Managed IT Services Provider.

Responsibilities are shared according to each organization’s needs.

Examples include:

Internal IT focuses on:

• Employee support
• Business applications
• Executive projects
• User relationships

Managed IT Services Provider focuses on:

• Cybersecurity
• Microsoft 365
• Infrastructure
• Monitoring
• Compliance support
• Strategic consulting
• Escalation support

Rather than replacing internal IT, co-managed IT expands its capabilities while reducing operational burden.

Key Insight

The most effective co-managed relationships clearly define responsibilities, communication processes, and shared business objectives.

When Co-Managed IT Is the Better Choice

Co-managed IT is often the right solution for accounting firms that already have capable internal IT personnel but need additional expertise, scalability, or strategic support.

This model allows internal IT staff to remain closely involved in daily operations while leveraging a Managed IT Services Provider for specialized capabilities.

Co-managed IT may be appropriate when your firm:

• Employs one or more internal IT professionals.
• Needs additional cybersecurity expertise.
• Requires 24×7 monitoring and response.
• Wants strategic technology planning.
• Is adopting Microsoft 365, AI, or cloud technologies.
• Needs additional resources during tax season or major projects.
• Wants redundancy when internal IT staff are unavailable.

Why This Matters

Co-managed IT strengthens your existing team rather than replacing it. It allows internal staff to focus on business initiatives while the Managed IT Services Provider provides specialized skills and operational support.

When Fully Managed IT Is the Better Choice

A fully managed IT model is often appropriate for firms that do not maintain an internal IT department or prefer to outsource technology management entirely.

This approach provides a single point of accountability for day-to-day IT operations.

Fully managed IT is often well suited for firms that:

• Have no dedicated IT personnel.
• Want predictable monthly IT costs.
• Require comprehensive cybersecurity management.
• Prefer a single technology partner.
• Need strategic guidance without hiring additional staff.
• Are experiencing rapid business growth.

Executive Planning Tip

Fully managed IT allows leadership to focus on client service and firm operations while technology management is handled by a dedicated provider.

Decision Matrix

The following comparison can help leadership determine which support model best aligns with the firm’s current needs.

There is no universally “best” model. The most appropriate approach depends on your firm’s goals, internal capabilities, and growth plans.

Responsibility Matrix

One of the advantages of co-managed IT is clearly defining who is responsible for each technology function.

Clearly documenting responsibilities reduces confusion, eliminates duplicated effort, and improves accountability.

Technology Growth Considerations

As accounting firms expand, technology complexity often increases faster than internal staffing.

Growth commonly introduces:

• Additional office locations.
• Hybrid work arrangements.
• More Microsoft 365 users.
• New accounting applications.
• Greater cybersecurity expectations.
• AI adoption.
• Higher client security requirements.

Many firms discover that their technology needs have outgrown the capacity of a single internal IT professional.

A co-managed model allows firms to scale technology capabilities without immediately expanding internal headcount.

Executive Decision Checklist

When evaluating IT operating models, leadership should consider the following questions.

Business Needs

☐ Are technology demands increasing?

☐ Are cybersecurity expectations growing?

☐ Is the firm adopting AI or additional cloud services?

☐ Do clients expect stronger security practices?

Internal Resources

☐ Does internal IT have sufficient capacity?

☐ Is specialized cybersecurity expertise available?

☐ Can internal staff provide strategic planning?

☐ Is there adequate coverage during vacations or absences?

Operational Readiness

☐ Are responsibilities clearly documented?

☐ Are executive reports provided regularly?

☐ Is business continuity fully supported?

☐ Are technology projects completed on schedule?

Future Growth

☐ Does the current model support expansion?

☐ Can additional users be supported efficiently?

☐ Are technology investments aligned with the firm’s roadmap?

☐ Is leadership confident in long-term scalability?

Common Mistakes When Choosing an IT Support Model

Many firms focus primarily on staffing rather than business outcomes.

Common mistakes include:

• Choosing Based Solely on Cost
• The least expensive option may not provide the expertise, cybersecurity capabilities, or strategic guidance required as the firm grows.

• Expecting Internal IT to Handle Everything
• Even highly capable IT professionals may not have the capacity to manage cybersecurity, compliance, cloud administration, vendor coordination, strategic planning, and day-to-day support simultaneously.

• Unclear Responsibility Boundaries
• Without documented ownership, important tasks may be duplicated or overlooked entirely.
• Clearly defining responsibilities is essential for both co-managed and fully managed relationships.

• Delaying Strategic Planning
• Waiting until technology becomes a bottleneck often results in reactive decisions, emergency purchases, and unnecessary disruption.
• A structured technology roadmap helps firms make proactive investments that support long-term growth.

Cost Considerations

The total cost of IT support extends beyond monthly service fees.

Leadership should evaluate:

• Internal staffing costs
• Employee benefits
• Ongoing training
• Cybersecurity investments
• Technology monitoring
• Software licensing
• Vendor management
• Strategic consulting
• Business continuity planning

For many accounting firms with 20–100 employees, co-managed IT offers a balance between leveraging existing internal expertise and gaining access to specialized resources without expanding full-time headcount.

“The best IT operating model is not the one with the fewest people. It is the one that gives your accounting firm the expertise, resilience, and strategic guidance needed to support long-term growth.”

Why This Matters for Los Angeles Accounting Firms

Accounting firms throughout Los Angeles County and Greater Los Angeles face increasing demands related to cybersecurity, hybrid work, Microsoft 365 administration, AI adoption, and client expectations.

Whether your firm chooses a co-managed or fully managed IT model, success depends on clearly defined responsibilities, proactive planning, and a technology strategy that supports business objectives rather than simply responding to technical issues.

The right operating model should give leadership confidence that technology can scale with the firm while protecting client data, supporting employees, and maintaining operational resilience.

Real-World Planning Scenario

How a Los Angeles Accounting Firm Used Co-Managed IT to Scale Without Expanding Its Internal IT Team

A growing accounting firm in Los Angeles County had an experienced internal IT manager who understood the firm’s accounting applications, employees, and day-to-day operations.

As the firm expanded, however, technology demands increased significantly.

New challenges included:

• Supporting a hybrid workforce.
• Managing Microsoft 365 security.
• Strengthening cybersecurity controls.
• Responding to client security questionnaires.
• Planning hardware refreshes.
• Preparing for AI adoption.
• Supporting multiple office locations.

Leadership considered hiring additional internal IT staff but recognized that doing so would require specialized expertise in cybersecurity, cloud infrastructure, compliance, and strategic planning.

So Instead, the firm adopted a co-managed IT model.

The internal IT manager continued overseeing user relationships, business applications, and internal projects, while the Managed IT Services Provider assumed responsibility for 24×7 monitoring, cybersecurity operations, Microsoft 365 administration, backup management, and strategic technology planning.

Quarterly Business Reviews helped both teams coordinate priorities, clarify responsibilities, and align technology initiatives with business objectives.

Rather than replacing internal IT, the co-managed model expanded the firm’s overall technology capabilities while allowing existing staff to focus on higher-value initiatives.

The result was a more scalable technology operation without significantly increasing internal headcount.

Executive Decision Framework

Use the following framework to determine which IT operating model best fits your accounting firm’s current stage of growth.

If Your Firm Has No Dedicated IT Staff

A fully managed IT model is often the most practical option.

Recommended priorities include:

• Centralized help desk support.
• Cybersecurity management.
• Microsoft 365 administration.
• Backup and disaster recovery.
• Strategic technology planning.
• Vendor management.

If You Have One Internal IT Professional

Evaluate whether that individual has sufficient time and resources to manage both daily operations and long-term technology initiatives.

Co-managed IT may provide:

• Cybersecurity expertise.
• 24×7 monitoring.
• Escalation support.
• Project assistance.
• Strategic consulting.
• Vacation and staffing coverage.

If You Have a Small Internal IT Team

Determine whether specialized expertise is available in areas such as:

• Microsoft 365 security.
• Business continuity.
• Compliance.
• AI governance.
• Cloud infrastructure.
• Executive technology planning.

Co-managed IT can supplement these capabilities without replacing existing staff.

If Your Technology Environment Is Mature

Focus on optimizing collaboration between internal IT and external partners.

Leadership should review:

• Clearly defined responsibilities.
• Quarterly Business Reviews.
• Technology roadmap updates.
• Cybersecurity reporting.
• Budget planning.
• Continuous improvement initiatives.

Boardroom Questions Every Managing Partner Should Ask

Technology leadership should regularly evaluate whether the firm’s current support model continues to align with business needs.

Consider asking:

• Does our current IT model support our growth strategy?
• Are cybersecurity responsibilities clearly assigned?
• Do we have access to the specialized expertise we need?
• Can our current team support Microsoft 365, AI, and future technologies?
• Are technology projects consistently completed on schedule?
• Are we receiving strategic guidance and not just technical support?
• If a key IT employee were unavailable tomorrow, how would operations be affected?
• Does our current operating model provide the resilience our clients expect?

These questions help leadership determine whether internal resources, co-managed IT, or a fully managed approach best supports the firm’s long-term objectives.

Conclusion

As accounting firms continue to grow, technology becomes increasingly important to client service, cybersecurity, operational resilience, and long-term competitiveness.

For firms throughout Los Angeles County and Greater Los Angeles, the decision is no longer whether technology matters—it is determining the best way to manage it.

Whether your organization relies on internal IT, fully managed services, or a co-managed partnership, success depends on clearly defined responsibilities, proactive planning, and executive oversight.

The strongest IT operating model is the one that provides your firm with the expertise, scalability, and strategic guidance needed to support future growth while protecting clients, employees, and business operations.

Is your current IT operating model supporting your firm’s future or simply maintaining today’s environment?

Fothion helps accounting firms throughout Los Angeles County and Greater Los Angeles evaluate internal IT capabilities, design effective co-managed or fully managed support models, and develop long-term technology strategies that align with business goals.

A technology strategy assessment can help your leadership team determine which operating model provides the greatest value for your firm.

Book a 30-minute call with Fothion: https://www.fothion.com/schedule-a-phone-call/

 

• Frequently Asked Questions

• What is co-managed IT?
• Co-managed IT is a partnership in which an organization’s internal IT team works alongside a Managed IT Services Provider. Responsibilities are shared based on each party’s expertise, allowing firms to expand their capabilities without replacing internal staff.

• How is fully managed IT different?
• With fully managed IT, the Managed IT Services Provider assumes primary responsibility for day-to-day technology operations, cybersecurity, infrastructure management, help desk support, and strategic planning.

• Which model is better for accounting firms?
• Neither model is universally better. The right choice depends on your firm’s size, internal IT capabilities, growth plans, cybersecurity requirements, and long-term business objectives.

• Can we transition from fully managed IT to co-managed IT later?
• Yes. As firms grow or hire internal technology staff, many organizations adjust their support model to better align with changing business needs.

• Will co-managed IT replace our internal IT employee?
• No. The purpose of co-managed IT is to complement and strengthen internal IT resources, not replace them. Internal staff continue to play an important role in supporting employees, business applications, and organizational priorities.

• Is co-managed IT more expensive than hiring another employee?
• It depends on the scope of services required. Leadership should evaluate the total value of specialized expertise, cybersecurity capabilities, strategic planning, monitoring, and staffing flexibility rather than comparing salaries alone.

• Who is responsible when issues occur?
• Successful co-managed IT relationships clearly define responsibilities through documented processes, communication plans, and regular governance meetings so accountability remains clear.

• Can a Managed IT Services Provider support strategic planning?
• Yes. Many providers offer virtual CIO (vCIO) services, technology roadmaps, budgeting assistance, cybersecurity planning, and Quarterly Business Reviews that help leadership align technology investments with business goals.