Is Your IT Company Telling You Everything?
There's a category of business risk that almost never appears in a management meeting: the near-miss.
The phishing email an employee clicked, caught by the antivirus at the last moment. The same support ticket, raised for the fourth time this quarter. The server that's been creaking for months. Somebody knows about every one of these. Usually, it's your IT company.
The question is whether they're telling you.
The Near-Misses You Never Hear About
Here's how it typically works. An employee clicks a dodgy link. The security software catches it. A ticket gets logged, resolved and closed. The system worked.
Except it didn't - not really.
Because the behaviour that caused the click is still there. The employee doesn't know they did anything wrong. Their manager has no idea it happened. And next month, a smarter email arrives.
This isn't a niche scenario. According to the Government's Cyber Security Breaches Survey 2025/26, 43% of UK businesses experienced a cyber breach or attack in the last twelve months - that is around 612,000 businesses. Phishing was by far the most common type, hitting 38% of all UK businesses and businesses that suffered it rated it the most disruptive attack they faced.
Most telling of all: among businesses that were breached, more than half were hit by phishing and nothing else. No exotic hacking. No firewall failures. Just emails, and people clicking them.
In other words, the single biggest cyber risk to your business is a behaviour problem. And behaviour problems don't get fixed by quietly closing tickets.
"Tickets Closed" Is Not the Same as "Problems Solved"
Reactive IT support is built around one measure of success: was the ticket resolved? And on that measure, plenty of providers score well.
But a closed ticket only tells you a symptom was treated. It tells you nothing about the cause.
The user who clicks phishing links keeps clicking them. The recurring printer fault keeps recurring. The slow server gets restarted instead of replaced. Everything is "dealt with" - and nothing actually changes. The risk just resets and waits.
The trouble is, you'd never know. From where you sit, IT looks fine. Quiet, even. That quiet is exactly the problem: it's the sound of issues being absorbed rather than reported.
What Proactive Actually Looks Like
A proactive IT partner treats every incident as information, not just a job to clear. In practice, that means three things:
Recurring issues get investigated, not just resolved. If the same problem comes back, the question stops being "how do we fix it?" and becomes "why does this keep happening?"
Risky patterns get raised - with the right people. If someone in your business is repeatedly clicking dangerous links, their manager should hear about it. Not to point fingers, but because training that person is cheaper than recovering from the day the software doesn't catch it.
You get told about problems before you feel them. The ageing server. The software going out of support. The security control that's missing. You should hear about these months before they become downtime, because by the time you can feel an IT problem, you're already paying for it.
None of this is complicated. It's just communication. Which is why it's such a reliable test of an IT company.
The Question That Tells You Everything
If you want to know which kind of support you've got, you don't need a technical audit. You need one question:
When did your IT company last contact you about something you hadn't reported?
If the answer is "regularly" - you've got a partner. They're watching, they're thinking ahead, and they're telling you the truth about your own business.
If the answer is "never" - your IT company may still be doing a perfectly decent job of fixing things. But nobody is looking at the causes. And the causes are where breaches, downtime and big unexpected bills all come from.
Find Out Where You Stand
If you're not sure what's sitting unreported in your IT setup, we've made it easy to find out. Our free Business IT Health Check takes less than 5 minutes and gives you an honest score across the areas that matter most - including the ones nobody's been telling you about.
