How to Evaluate a Managed IT Provider as a Chicago Law Firm

Most law firms don’t switch IT providers because they went looking for a better vendor. They switch because something already broke: a partner locked out of the system during discovery, a backup that turned out not to work when someone needed a prior version of a court filing, or a security incident that made the managing partner ask, for the first time, exactly what their current provider had actually been doing. By the time that conversation happens, the firm is evaluating IT vendors under pressure, which is the worst possible time to do it well.

This guide is built around the questions a managing partner should actually ask before signing with a managed IT provider for Chicago law firms, not the questions most sales conversations are built to avoid. Here’s what separates a real answer from a sales pitch.

Ask Whether They Know the Legal Industry or Just Say They Do

Almost every IT provider will tell you they “work with law firms.” Few can tell you specifically what that means. A managing partner should ask what percentage of the provider’s client base is legal, which practice management and document management platforms they’ve actually configured (Clio, NetDocuments, iManage, ProLaw), and how they’d describe the difference between supporting a law firm and supporting a general business client.

One concrete way to check this claim is credentialing that comes from the legal community itself, not the IT industry. CTI Technology, for example, appears in the Illinois State Bar Association’s Expert Directory under Information Technology, a listing that reflects recognition from Illinois attorneys and bar leadership rather than a vendor’s own marketing. If a provider can’t point to anything the legal community itself has vetted, “we work with law firms” is a claim, not a credential.

The stakes behind this question are higher than they used to be. Attorneys carry ethical and legal duties to safeguard confidential information, alongside regulatory and contractual obligations, and the threats to law firm data keep growing according to the American Bar Association’s guidance on cybersecurity basics. A provider who understands ABA Rule 1.6 and how “reasonable efforts” gets interpreted for a law firm’s technology environment is answering a different question than one who’s only ever thought about uptime.

Ask What Onboarding Actually Looks Like Before You Sign

Vague onboarding promises are one of the clearest signals of an inexperienced or overextended provider. Ask for a specific timeline and a specific process. A structured legal IT onboarding typically runs 15 to 30 days from the initial kickoff call, and during that window a competent provider should be documenting the firm’s environment, deploying core security tools, and establishing remote support for every individual user, not waiting for problems to surface after the contract is signed.

Push further. Ask what gets assessed first. A firm should expect the provider to evaluate network infrastructure, including firewalls, switches, and Wi-Fi, to identify vulnerabilities; document how staff access information both on-site and remotely; review access controls and multi-factor authentication on cloud platforms like Microsoft 365; and evaluate the firm’s disaster recovery protocols. If a provider can’t describe this sequence without prompting, they haven’t done it enough times to have a process.

Also ask how they minimize disruption during the transition. A well-run onboarding should require end users to do very little beyond installing a remote support tool, a five-minute task, while the rest of the security and monitoring stack deploys in the background. If a provider’s answer involves shutting down systems or pulling staff away from billable work for extended stretches, that’s a firm that hasn’t onboarded a law practice before.

Ask What They Typically Find, Not What They Promise to Fix

This is the question that separates experienced legal IT providers from generalists. Ask directly: “In a typical law firm onboarding, what do you usually find that’s broken?” A provider who has actually done this work should be able to answer without hesitation, because the pattern repeats across firms.

Common findings include excessive administrative permissions, unmanaged end-user accounts, insufficient endpoint protection, and backup policies that were never documented or tested for actual recovery. On the documentation side, providers commonly uncover outdated or end-of-life software, missing security patches, and inconsistent workstation configurations that make troubleshooting harder than it needs to be.

The uncomfortable truth is that most of these gaps stay invisible until they matter. A firm’s daily focus is on accessing case files and exchanging email, which creates a false sense of security. The shortcomings of a backup process often go undetected until someone needs a specific version of a document and it isn’t recoverable. Ask a prospective provider to walk you through a real (anonymized) example of what an onboarding audit uncovered. If they can’t, they haven’t done enough of them.

Ask Who You’ll Actually Talk to When Something Goes Wrong

Every provider will describe their support model. Few structure it well. The question worth asking is whether the firm gets a single point of strategic contact, separate from the technicians who resolve day-to-day tickets, or whether every conversation starts from zero with whoever picks up the phone.

A dedicated Account Manager model addresses this directly. That person operates in a consultative role: running quarterly business reviews, tracking cybersecurity and industry trends relevant to the firm, managing licensing and vendor quoting, and coordinating escalations with the technical team, while the service desk handles break/fix resolution through the ticketing system. Ask a prospective provider how often they meet with clients and what those meetings actually cover. Quarterly Technology Business Reviews should include a review of network and endpoint health, updates on emerging risks, and forward-looking discussion, not just a status update on open tickets.

This question matters more for law firms than most other industries because of what downtime actually costs. A locked-out partner or a document management outage doesn’t just cost IT hours, it costs billable time and can affect court deadlines. Ask how a provider prioritizes issues for a law firm specifically. If their answer treats every ticket the same regardless of whether it’s blocking a filing deadline, that’s worth knowing before you sign.

Ask How You’re Billed, Because It Shapes Their Incentives

Pricing structure isn’t just a budget question, it’s an incentive question. If a provider bills by the ticket or by the hour, they have a built-in incentive to let small problems linger rather than invest in fixing root causes. A flat-fee model that covers unlimited support removes that dynamic entirely: the provider’s financial interest lines up with actually keeping the environment stable, because more tickets cost them, not you.

Ask a prospective provider directly whether support requests are capped, tiered, or billed incrementally, and get the answer in writing before you sign. A flat-fee structure that includes unlimited support is the model to compare everything else against, because it’s the only one that doesn’t quietly reward a provider for your firm having a bad month.

Ask What Happens When You Stop Asking Questions

This last question is the one most managing partners never think to ask, and it’s the most revealing. Every provider performs well in the first ninety days. The real test is what happens to a client who goes quiet, who doesn’t push for quarterly reviews, who assumes things are fine because nothing has broken recently.

Ask how a provider handles disengaged clients. A firm that continues receiving written quarterly review summaries, proactive monitoring, and consistent service quality regardless of how loudly the client is asking for it is a firm being managed by a real process, not by whoever happens to be squeaking. If a provider’s honest answer is “we focus on the clients who reach out,” that tells you what your relationship looks like two years in.

The Cost of Getting This Wrong

The reason these questions matter isn’t hypothetical. In IBM’s 2025 analysis of breached organizations, operational disruption affected 31% of the studied organizations, and breaches involving data distributed across multiple environments cost an average of $5.05 million. A law firm doesn’t need to be the target of a headline-making breach to feel that kind of impact. A single week of degraded systems during active litigation, or a backup that fails at the exact moment it’s needed, does real damage to a practice’s ability to serve clients and protect privileged information.

The providers worth hiring are the ones who can answer every question above specifically, with real numbers, real timelines, and real examples, rather than reassurance. CTI Technology has worked with Chicago-area law firms for close to two decades and is listed in the Illinois State Bar Association’s Expert Directory, and our onboarding, account management, and flat-fee support model are built around the standards outlined here. If you’d like to see how your firm’s current environment measures up, we offer a complimentary risk assessment for Chicago law firms, or you can reach our team directly at (847) 888-1900.

Aaron Kane

CEO of CTI Technology

Aaron Kane is the CEO of CTI Technology, a Chicago-based IT services provider helping businesses navigate technology with confidence. With expertise in IT strategy, infrastructure, cloud solutions, and voice technologies, Aaron focuses on helping organizations improve efficiency, strengthen operations, and make smarter technology decisions. Under his leadership, CTI Technology has continued to grow while maintaining a strong focus on service and long-term client relationships.

Connect with Aaron on Linkedin