Frequently Asked Questions
Straight answers to the questions we hear every week.
Getting Started
What does a managed IT services provider actually do?
A managed provider takes ownership of your technology — support, security, maintenance, and planning — for a flat monthly fee instead of billing hourly when things break. At Pinnacle IT that includes U.S.-based help desk, 24/7 monitoring, on-site support with no labor caps, a managed security stack, tested backups, and technology reviews that produce a real budget.
How much do managed IT services cost?
We price per user or per device as one flat monthly rate — the same figure all year, no labor caps, no surprise invoices. The exact rate depends on headcount, locations, and compliance requirements, which the free evaluation determines before we quote anything.
What does the free evaluation involve?
Our free evaluation includes a deep-dive discovery of your infrastructure: security gaps, licensing waste, backup posture, and the chronic issues nobody has budgeted for — delivered as a risk-ranked picture of your environment you keep whether or not you hire us.
What size organizations do you work with?
Our sweet spot is 20 to 300 users — large enough to need real governance and security, small enough that a full internal IT department is hard to justify. We serve all of Arkansas from six offices, with technicians in Dallas and Springfield for multi-state footprints.
Do you replace internal IT staff?
Only if that’s what you want. Our co-managed model supports internal IT teams with enterprise tooling, a 24/7 security stack, escalation depth, and coverage — many of our best relationships are partnerships with a client’s own IT lead.
Cybersecurity
Do small and mid-sized organizations really get targeted?
Yes, often more than enterprises because attacks are automated and defenses are thinner. Phishing remains the most common starting point, and compromised identities now rival malware as the way in. Size is not a defense; layers are.
What’s the difference between antivirus and EDR?
Antivirus blocks known malicious files; EDR (endpoint detection and response) watches behavior and catches the attacker who got past it — especially when backed by a 24/7 security operations center that investigates every alert. EDR is the modern baseline and a common cyber insurance requirement.
Can you help us with our cyber insurance renewal?
Yes, cyber insurance one of our specialties. We map your environment against the carrier questionnaire, close the gaps before the deadline, and document everything so every answer is one you can defend. Strong, verifiable controls position you for the best available rates.
We think we’re having a security incident right now. What do we do?
Call 877-938-9450 immediately. Disconnect affected machines from the network (unplug the cable or turn off Wi-Fi), leave them powered on, and don’t pay or wipe anything before talking to a professional.
Compliance
Which compliance frameworks do you support?
Pinnacle IT supports a variety of compliance frameworks, including HIPAA for healthcare, CJIS/ACIC for anything touching criminal justice data, CMMC and NIST 800-171 for the defense supply chain, PCI DSS for card payments, and IRS 1075 for federal tax information — with gap assessments, remediation costed line by line, and audit support from a team that has sat through the audits.
What’s the difference between being secure and being compliant?
Security protects you from attackers; compliance proves it to a third party — and each can exist without the other. We build programs that do both, because you’ll eventually be tested by both.
Does CMMC apply to us if we only work for a prime contractor?
Almost certainly yes, if controlled unclassified information flows down to you. Primes must verify their subcontractors’ CMMC status, and requirements are phasing into DoD contracts through 2028 — certification can’t be back-filled after award. → /industries/manufacturing
Cloud & Microsoft 365
Does Microsoft back up our Microsoft 365 data?
No — not in the way most people assume. Microsoft’s shared responsibility model puts data protection on the customer: deletions, ransomware, and insider damage are yours to recover from, which is what independent SaaS backup with tested restores is for. → /cloud/backup
Can you reduce our Microsoft 365 costs?
Usually. Most tenants we review carry licenses for departed employees, oversized tiers, and overlapping tools — and are simultaneously not using security features they already pay for. A tenant review maps all of it to a per-user number you can budget. → /cloud/microsoft-365-management
How fast can you onboard or offboard an employee?
Same day. New hires are provisioned before they sit down; departing employees lose access at a fixed minute you choose, with mailbox and files preserved. → /cloud/microsoft-365-management
AI Readiness
How do I know if my organization is ready for AI?
Most aren’t — not because AI is out of reach, but because permissions, data governance, and policies weren’t built with AI in mind, and AI tools inherit every permission your users already have. Our AI Readiness Assessment scores your environment across ten areas and delivers an executive roadmap. → /ai-readiness
Should we just block AI tools until we’re ready?
Blocking rarely works — employees route around it on personal devices, and you lose visibility entirely. The durable answer is governance: approved tools, DLP controls, a written policy, and permissions that limit what any tool can reach. → /ai-readiness
What does the AI Readiness Assessment cost?
It starts at $5,000 depending on the size and complexity of your environment — and it’s complimentary when you partner with Pinnacle IT on a managed services agreement. → /ai-readiness
Working with us
How fast do you respond to support requests?
Response times are defined by SLA tier — in writing — with after-hours, on-call engineers for emergencies. About 80% of requests are resolved remotely; the rest get a technician on-site, with no labor caps. → /managed-it
Are we locked into a long contract?
Agreements have a defined term, but retention is how we actually measure ourselves: 95% of managed clients stay beyond their first contract. → /about
Where are you located?
Pinnacle IT has six offices Arkansas offices — Little Rock (HQ), Lowell, Fort Smith, Jonesboro, Texarkana, and Hot Springs — plus technicians in Dallas, TX and Springfield, MO. → /about/locations
