Advisory ModelMay 26, 20263 min read

How to Choose an IT Advisor: A Buyer's Checklist

One question reveals more about an IT advisor than any sales presentation: can they show you the options they didn't recommend, and why?

Team working in modern office
Key takeaway

The single most important question to ask an IT advisor: 'Can you show me the options you considered and didn't recommend, and why?' If they can't show you a comparison, you're getting a sales recommendation, not advice.

The one question that reveals everything

Before evaluating methodology, credentials, or experience, ask: "Can you show me the options you considered and didn't recommend, and why?" A fit-first advisor will walk you through the alternatives, the tradeoffs, and why the recommendation fits your environment. If every answer points to the same vendor, or the advisor can't show a comparison, you're getting a sales recommendation, not advice. It's also fair to ask how an advisor is compensated. A trustworthy advisor will answer plainly, and the answer should never limit the options you see.


Five red flags in IT advisor proposals

Beyond that first question, certain patterns in proposals and sales processes indicate an advisor whose interests may not align with yours.

  • Red flag 1: Single-vendor recommendations. If every proposal recommends Microsoft, or every proposal recommends Cisco, the advisor may be working from one catalog instead of the full market.
  • Red flag 2: Bundled services. Proposals that bundle advisory with managed services make it hard to see what each piece costs, and hard to replace one without the other.
  • Red flag 3: No discovery phase. An advisor who proposes solutions before thoroughly understanding your environment is selling, not advising. A legitimate engagement starts with assessment.
  • Red flag 4: Resistance to competitive comparison. If the advisor resists presenting multiple options for a given need, they may be protecting a preferred vendor instead of finding your best fit.
  • Red flag 5: Long-term lock-in. Multi-year contracts with heavy early-termination penalties suggest the advisor is protecting revenue, not earning ongoing trust.

A good IT advisory proposal should include a defined discovery phase, multiple vendor options for each need, transparent pricing, and a side-by-side comparison of the options considered.


What a good advisory engagement looks like

A well-structured IT advisory engagement follows a predictable pattern that prioritizes understanding before recommending.

  • Phase 1: Discovery (30-60 days). Complete assessment of your current IT environment, contracts, security posture, compliance status, and business objectives. No recommendations are made during discovery.
  • Phase 2: Roadmap (delivered after discovery). A prioritized plan with specific recommendations, timelines, estimated costs, and expected outcomes. Multiple vendor options are presented for each recommendation.
  • Phase 3: Ongoing governance (monthly/quarterly). Regular strategic reviews, vendor oversight, budget tracking, and roadmap updates. The advisor holds vendors and MSPs accountable to defined SLAs.
  • Transparent deliverables: Every engagement should include clear deliverables: assessment reports, roadmap documents, vendor scorecards, and board-ready briefings.
  • Defined scope boundaries: The advisor should clearly state what is and is not included. Advisory does not include help desk support, product sales, or implementation unless explicitly scoped.

CCK Advisors' engagement followed this structure and resulted in a 38% cost reduction because every contract was benchmarked against the market and the roadmap was tied to measurable business outcomes.


Evaluation checklist

Use this checklist when evaluating any IT advisory firm. Score each criterion and compare across candidates.

  • Fit-first recommendations: Does the firm show multiple options side by side, explain the tradeoffs, and answer plainly if you ask how they are compensated? (Required)
  • Discovery-first approach: Does the engagement begin with assessment before recommendations? (Required)
  • Multi-vendor options: Does the firm present competitive alternatives for each recommendation? (Required)
  • Transparent pricing: Is the fee structure clear (retainer, hourly, or project-based) with no hidden product margins? (Required)
  • Relevant experience: Has the firm worked with organizations of similar size, industry, and complexity? (Important)
  • Defined deliverables: Are assessment reports, roadmaps, and governance documents specified in the engagement agreement? (Required)
  • References available: Can the firm provide references from current clients in similar situations? (Important)
  • No lock-in: Can you exit the engagement with 30-60 days notice without penalty? (Required)
  • Separation from operations: Does the firm avoid bundling advisory with MSP or product sales? (Required)

Any firm that meets all nine criteria is worth a serious conversation. Any firm that fails on fit-first recommendations or separation from operations should be evaluated with extreme caution.

Frequently asked questions

How much does an IT advisor cost?

Across the industry, IT advisory engagements typically range from $5,000 to $15,000 per month for ongoing retainer relationships, or $15,000 to $50,000 for project-based assessments, depending on organization size, complexity, and scope. Get IT Sense works differently on the way in: the IT Health Check, the CyberPrivacy Snapshot, and the IT Spend Analysis are free. The full CyberPrivacy assessment and the Cyber Insurance Readiness Review are scoped, one-time engagements starting at $5,000, confirmed on a short scoping call. For context, Horizon Management's advisory engagement produced $84,000 in annual savings that funded their entire cybersecurity compliance program. The ROI was positive within the first quarter.

Can a small business afford an IT advisor?

Yes. Small businesses (25-50 employees) can engage an advisor at reduced scope — quarterly strategic reviews, annual security assessments, and vendor evaluation support — which across the industry typically runs $2,000 to $5,000 per month. That is comparable to a single senior IT employee's salary but provides broader strategic expertise and vendor-neutral guidance. With Get IT Sense you can start at no cost: the IT Health Check, CyberPrivacy Snapshot, and IT Spend Analysis are free, so you can see the gaps and the savings before committing to a paid engagement.

What credentials should an IT advisor have?

Look for practical experience over certifications alone. Relevant certifications include CISSP, CISM, and CISA for security-focused advisors, and PMP or ITIL for operational advisors. More important than certifications: direct experience with organizations of your size, industry-specific compliance knowledge, and a demonstrable track record of vendor-neutral recommendations.

Ready to take the next step?

Talk to our advisory team about applying these insights to your business.