| QUICK ANSWER
In-house IT vs. managed IT services is a decision about total cost, coverage depth, and business risk. In-house IT means hiring one or more full-time employees to manage your technology internally. Managed IT services means outsourcing that function to a provider who monitors, maintains, and secures your environment for a flat monthly fee. For most Chicago SMBs with fewer than 150 employees, managed IT delivers broader expertise and faster response at significantly lower total cost. |
A Chicago accounting firm we spoke with last year had one IT person on staff. He was talented, hardworking, and completely overwhelmed. When ransomware hit on a Thursday evening, he was at his daughter’s school play. By Friday morning, the firm had lost access to three years of client files.
That is not an indictment of in-house IT. It is an illustration of what a single point of failure costs when it breaks. The in-house IT vs. managed IT services debate is not about loyalty or preference. It is about whether your current IT structure can absorb the worst-case scenario without shutting your business down.
This post breaks down both models honestly, with real numbers, real trade-offs, and the questions Chicago business owners should be asking before they decide.
IN THIS ARTICLE
- Why Chicago SMBs Are Rethinking Their IT Model
- What In-House IT Actually Costs (Beyond the Salary)
- What Managed IT Services Actually Includes
- In-House IT vs. Managed IT Services: A Direct Comparison
- When In-House IT Still Makes Sense
- How Chicago SMBs Are Making This Decision in Practice
- The ProdigyTeks Position
- Key Takeaways
- Frequently Asked Questions
Why Chicago SMBs Are Rethinking Their IT Model
The cost of a bad IT decision used to show up slowly. A network outage here, a slow computer there, a compliance fine that arrived six months after the audit. Today, the consequences arrive faster and hit harder. The average cost of a data breach for a small business reached $4.88 million in 2024, according to the IBM Cost of a Data Breach Report. For a firm with 20 employees in Lincoln Park or a construction company managing projects across the south suburbs, that number is not theoretical. It is existential.
We have seen this with Chicago clients across industries. A nonprofit in Wicker Park tried to stretch their in-house IT coordinator into a cybersecurity role. A real estate brokerage in the Loop assumed their single IT contractor was monitoring their network after hours. In both cases, the gap between what they assumed was covered and what was actually covered was where the problem started.
The honest question is not which model sounds better in a sales brochure. It is which model actually closes the gaps that put your business at risk. That answer depends on your headcount, your industry, your compliance obligations, and your appetite for unplanned IT costs.
What In-House IT Actually Costs (Beyond the Salary)
Most business owners price in-house IT by salary. That number is real, but it is only the beginning. The true cost of an internal IT hire in Chicago includes significantly more than the W-2.
According to CompTIA’s IT Industry Outlook, the average salary for an IT support specialist in Chicago ranges from $62,000 to $95,000 annually depending on experience level. Add employer payroll taxes (7.65%), health insurance contribution ($6,000 to $12,000 per year), paid time off, retirement matching, and equipment, and the fully-loaded cost of a single IT employee lands between $85,000 and $130,000 per year.
| COST SIGNAL
That $130,000 figure covers one person with one skill set, working roughly 2,000 hours per year. It does not cover vacations, sick days, nights, weekends, or the six weeks it takes to hire a replacement when they leave. |
The Hidden Costs That Don’t Show Up on the Payroll Line
Beyond compensation, in-house IT requires tooling. Endpoint monitoring software, patch management platforms, backup solutions, antivirus licensing, and ticketing systems typically run $8,000 to $20,000 per year for a team of 20 to 50 employees. These costs are often invisible until the renewal invoice arrives.
There is also the coverage gap. A single IT employee works set hours. Cyberattacks, server failures, and ransomware do not respect business hours. The Verizon Data Breach Investigations Report consistently shows that breaches are detected hours to days after the initial intrusion. An in-house IT person who leaves at 5:30 PM has no visibility into what is happening at 2:00 AM.
We have seen this with Chicago clients in construction and real estate, where a network issue on a Friday afternoon derails a Monday closing or a job site startup. The in-house model works when nothing goes wrong. The MSP model is built around what happens when it does.
What Managed IT Services Actually Includes
The term managed IT services covers a wide range of service models. Before comparing it to in-house IT, it is worth being precise about what a mature MSP engagement includes, because not all providers deliver the same scope.
A full-service managed IT agreement from a provider like ProdigyTeks typically includes 24/7 remote monitoring of your network, endpoints, and servers; proactive patch management and software updates; helpdesk support for your team by phone, email, and remote session; cybersecurity tools including endpoint detection, email filtering, and DNS protection; backup and disaster recovery management; and strategic IT planning aligned to your business roadmap.
What ’24/7 Monitoring’ Actually Means
This is the phrase most MSPs use and fewest buyers interrogate. Real 24/7 monitoring means automated alerting tied to human escalation protocols. It means that when a server temperature spikes at 3:00 AM or an endpoint starts communicating with a suspicious IP, a process kicks in that does not require your employee to be awake.
At ProdigyTeks, our monitoring stack flags anomalies in real time and routes critical alerts to our on-call team. For our Chicago law firm clients, that coverage is what keeps a network event from becoming a client data breach. It is not a feature. It is the entire point.
Across the managed IT clients we support in Chicago, the average response time for a critical alert is under 15 minutes. For businesses relying on a single in-house employee, that same response time depends entirely on whether their phone is on and whether they can remote in from wherever they are.
In-House IT vs. Managed IT Services: A Direct Comparison
The table below reflects real-world ranges for Chicago SMBs with 20 to 75 employees. Costs and capabilities will vary based on provider, headcount, and service tier.
| Factor | In-House IT | Managed IT (MSP) |
| Monthly Cost | $8,000-$12,000+ (salary, benefits, overhead) | $1,500-$4,500 (flat monthly fee) |
| Coverage Hours | Business hours only | 24/7 monitoring and support |
| Depth of Expertise | One generalist skill set | Team of specialists across disciplines |
| Scalability | Hire new staff to scale | Scale up or down instantly |
| Cybersecurity | Often secondary responsibility | Core service with dedicated tools |
| Response to Outages | One person, one location | Team response, remote and on-site |
Source: CompTIA IT Industry Outlook 2024; ProdigyTeks client data; IBM Cost of a Data Breach Report 2024.
The Total Cost of Ownership Calculation
When Chicago SMBs run this comparison honestly, the managed IT model typically costs 40% to 60% less than a fully-loaded in-house hire, while delivering broader coverage, deeper expertise, and faster response times. The savings compound further when you factor in the tooling costs that a managed IT provider absorbs on your behalf.
We have seen this with clients who switched from in-house to managed IT after their IT employee resigned. The transition cut their annual IT spend by over $60,000 and added overnight monitoring coverage they had never had before. The comparison is not always that stark, but the directional difference is consistent.
When In-House IT Still Makes Sense
This is not a post designed to push every Chicago SMB toward managed IT. There are genuine scenarios where an internal IT hire is the right answer, and it is worth being specific about what they are.
In-house IT makes strong sense when your organization has 150 or more employees and requires dedicated on-site support daily. It also makes sense when you operate proprietary or highly customized technology that requires institutional knowledge to maintain, or when regulatory requirements mandate direct employee control over certain systems.
The Hybrid Model: In-House Plus MSP
Many Chicago companies with 75 to 150 employees land in a middle ground. They have one internal IT person who handles day-to-day helpdesk requests and vendor relationships, paired with an MSP that handles monitoring, cybersecurity, backup, and after-hours response. This model eliminates the single point of failure without eliminating the internal resource.
At ProdigyTeks, roughly 30% of our Chicago client relationships are hybrid arrangements. The internal IT person coordinates with us on projects and escalations. We handle everything that falls outside normal business hours or outside their technical depth. It is a structure that works particularly well for nonprofits and mid-size professional services firms.
If you are considering the hybrid model, the key is defining the scope boundary clearly in writing. Overlapping responsibilities and unclear escalation paths are where hybrid arrangements break down.
How Chicago SMBs Are Making This Decision in Practice
The businesses that make this decision well start with three questions, not one. They do not ask ‘which is cheaper?’ They ask: What is our current IT coverage gap? What is our risk exposure if IT fails during our busiest period? And what does our IT need to look like in three years?
The coverage gap question is the most revealing. Walk through what happens when your IT person is sick, on vacation, or on the phone with another employee. Are your systems being monitored? Is anyone watching for intrusions? Who handles the 2:00 AM server alert? If the answer to any of those questions is ‘no one,’ that is your gap.
| PRODIGYTEKS INSIGHT
The businesses that make this decision well tend to have already experienced one painful IT failure. They know what an unmonitored weekend costs. The businesses that struggle are the ones making this decision before the failure, purely on a spreadsheet, without accounting for what they have never seen happen to them yet. |
The Compliance Dimension for Chicago Businesses
For law firms, healthcare-adjacent businesses, financial services companies, and government contractors in Chicago, the in-house vs. managed IT decision also carries compliance weight. ABA Rule 1.6 requires law firms to make reasonable efforts to prevent unauthorized disclosure of client information. HIPAA imposes technical safeguards that go well beyond what most in-house generalists are trained to implement and audit.
An MSP that specializes in your industry brings pre-built compliance frameworks, documentation practices, and audit-ready reporting that an in-house hire typically cannot replicate without additional training and tooling investment. We have seen this with Chicago law firms that discovered their in-house IT setup had no formal access control documentation, a gap that creates bar complaint exposure, not just network risk.
The ProdigyTeks Position
| Paco Lebron, Founder & CEO, ProdigyTeks:
“The in-house vs. managed IT debate usually gets framed as a cost question, and cost matters. But the more important question is coverage. A single IT employee, no matter how talented, is one person with one set of hours and one set of skills. The businesses that call us after a breach are almost never the ones that spent too much on IT. They are the ones that assumed one person was enough. For most Chicago SMBs, the math on managed IT is not close.” |
Key Takeaways
- → In-house IT vs. managed IT services is primarily a decision about total cost, coverage hours, and risk exposure, not just salary comparison.
- → The fully-loaded annual cost of a single in-house IT employee in Chicago ranges from $85,000 to $130,000, before tooling and benefits.
- → A full-service managed IT agreement for a Chicago SMB with 20 to 75 employees typically ranges from $1,500 to $4,500 per month, delivering 24/7 coverage and a team of specialists.
- → The average cost of a small business data breach reached $4.88 million in 2024, according to the IBM Cost of a Data Breach Report. Single-point IT coverage is a material risk factor.
- → A hybrid model (one internal IT person plus an MSP) is a strong option for businesses with 75 to 150 employees who need both on-site support and after-hours monitoring coverage.
- → Compliance-driven industries including law, healthcare-adjacent, and financial services face additional risk from in-house IT setups that lack formal access control documentation and audit-ready reporting.
Frequently Asked Questions
How much does managed IT cost for a small business in Chicago?
Managed IT services for a Chicago SMB with 20 to 75 employees typically range from $1,500 to $4,500 per month depending on headcount, service scope, and cybersecurity services. Most providers offer flat-fee pricing that covers monitoring, helpdesk, patching, and security tools. Per-user pricing models generally run $100 to $175 per user per month for comprehensive coverage.
What is the difference between managed IT and break-fix IT support?
Break-fix IT means you call a technician when something breaks and pay per incident. Managed IT means a provider proactively monitors, maintains, and secures your environment for a flat monthly fee. Break-fix is reactive and unpredictable in cost. Managed IT is proactive and budgetable, with most issues resolved before they cause downtime.
Can I keep my in-house IT person and still use a managed IT provider?
Yes, and this hybrid model is common among Chicago businesses with 75 to 150 employees. Your internal person handles daily helpdesk requests and vendor coordination while the MSP covers monitoring, cybersecurity, backup, and after-hours response. The key is a written scope agreement that clearly defines who handles what to avoid gaps and overlap.
How quickly can a managed IT provider respond to an emergency?
Response times vary by provider and incident severity. At ProdigyTeks, critical alerts trigger a response within 15 minutes through our monitoring and on-call protocols. Remote resolution for most issues takes under one hour. On-site response in the Chicago metro area is typically available within two to four hours for situations that cannot be resolved remotely.
Is managed IT secure enough for a Chicago law firm?
A managed IT provider that specializes in professional services and builds to ABA Rule 1.6 and applicable state bar guidelines is generally more secure than a generalist in-house IT hire. The key is verifying that the MSP has documented access controls, encrypted backup with tested recovery, endpoint detection and response tools, and audit-ready compliance reporting before you sign.
What happens to my data if I switch from in-house IT to a managed IT provider?
A professional MSP transition includes a full environment audit, documentation of your current infrastructure, and a migration plan that maintains data continuity. Your data stays on your systems or your chosen cloud environment. ProdigyTeks does not take custody of client data. We manage access, security, and backup on infrastructure you own or control.
How do I know if my business is too small for managed IT services?
Most managed IT providers work with businesses starting at 10 employees. If you have fewer than 10 users, a part-time IT contractor or a basic co-managed arrangement may be more cost-effective. If you have 10 or more employees and are carrying compliance obligations, customer data, or financial records, the risk exposure of unmonitored IT typically outweighs the cost savings of DIY support.
ABOUT THE AUTHOR
Paco Lebron is the Founder & CEO of ProdigyTeks, a Chicago-based managed IT and cybersecurity firm with 25+ years of experience. He has partnered with law firms, nonprofits, real estate companies, and SMBs across the Chicago metro to build IT environments that are secure, compliant, and built for growth. Learn more at prodigyteks.com/about.