Quick Summary
A common question for Australian mid-market businesses is: "Should we hire our own IT team or outsource to a managed service provider?" The answer depends on your company size, IT complexity, compliance requirements, and how much on-site support you need. For many 50-500 employee companies, a hybrid approach (an internal IT coordinator plus a managed service provider) gives the best balance of cost, coverage, and capability. This article provides a cost comparison, skills gap analysis, the 24/7 coverage challenge, and when each approach makes sense.
Table of Contents
- Cost Comparison Table
- Skills Gap Analysis
- The 24/7 Coverage Challenge
- When In-House Makes Sense
- When MSP Wins
- Hybrid Approach: Best of Both
- Frequently Asked Questions
Cost Comparison Table
There is no reliable published benchmark for Australian IT salaries by role and managed IT prices together, so rather than quote generic ranges, this section sets out what to include for each option. Fill it in with your own salary data and real MSP quotes for a like-for-like comparison.
Option 1: Fully In-House IT Team
| Cost Component | What to Include |
|---|---|
| IT Manager (senior, full-time) | Salary, plus super (12% from 1 July 2025, per the ATO), plus on-costs such as payroll tax, workers compensation, leave and equipment |
| IT Support Technician (full-time) | Salary, super and on-costs |
| Cybersecurity Analyst (full-time equivalent) | Salary, super and on-costs, or a contractor rate |
| Software and hardware budget | Monitoring, security, backup and management tools you would otherwise get through an MSP |
| Training and certifications | Courses, certifications and conferences to keep skills current |
| Recruitment | Agency fees and vacancy time when someone leaves |
| Downtime cost | Usually higher with a small team and no after-hours cover |
Option 2: Fully Outsourced to an MSP
| Cost Component | What to Include |
|---|---|
| Base managed IT fee | Per-user fee x users x 12, from real quotes |
| Out-of-scope project work | Ask each MSP for the historical average for similar clients |
| After-hours emergency calls | Only if not included in the base fee |
| Downtime cost | Usually lower with 24/7 monitoring |
Option 3: Hybrid (Internal Coordinator + MSP)
| Cost Component | What to Include |
|---|---|
| Internal IT coordinator (1 FTE) | Salary, super and on-costs |
| MSP fee | Often lower per user than full outsourcing, as the coordinator handles first-line requests |
| Out-of-scope work | Usually less, as the coordinator handles small on-site jobs |
| Downtime cost | Reduced with a proactive MSP and an on-site coordinator |
The Verdict
| Approach | Relative Cost | Pros | Cons |
|---|---|---|---|
| Fully in-house | Usually the highest for a 100-user company once you cover the skills needed | Full control, deep business knowledge, immediate on-site response | Expensive, limited skill diversity, single points of failure, no 24/7 coverage |
| Fully outsourced (MSP) | Usually the lowest direct cost | Predictable costs, 24/7 monitoring, diverse skill set | Less on-site presence, quality varies widely between providers |
| Hybrid (often recommended) | Between the two | Internal advocate and on-site presence plus MSP capability and 24/7 coverage | Requires good coordination between internal and external teams |
Skills Gap Analysis
An in-house IT team for a 100-user company is often two or three people. An MSP has a larger team of specialists across networking, security, cloud and helpdesk. The skills gap is significant.
Skills Comparison
| IT Skill Area | Small In-House Team | MSP Team |
|---|---|---|
| Network engineering | 1 person (generalist) | Several dedicated network engineers |
| Server administration | 1 person (generalist) | Server specialists (Windows, Linux, cloud) |
| Cybersecurity | Part-time or contractor | Dedicated security team, often with 24/7 monitoring |
| Cloud infrastructure | Basic knowledge | Experienced Azure/AWS and Microsoft 365 engineers |
| Helpdesk support | 1 person (overwhelmed at volume) | Helpdesk technicians with a ticket management system |
| Backup and DR | Basic setup, infrequent testing | Automated monitoring and scheduled restore testing |
| Vendor management | IT manager handles ad hoc | Established vendor relationships and contract experience |
| Strategic advisory | Not available (too busy with operations) | Quarterly business reviews and IT roadmapping |
| Compliance (Essential Eight, APRA) | Self-taught, inconsistent | Repeatable assessment and evidence collection processes |
The IT Skills Shortage in Australia
Experienced IT and cybersecurity people are hard to find in Australia. Senior roles can take months to fill, good people are regularly approached by other employers, and keeping skills current means ongoing spending on training and certifications.
This skills shortage makes it difficult for a mid-market business to hire, retain, and develop a comprehensive in-house IT team.
The Knowledge Concentration Risk
With an in-house team of 2-3 people, you face a critical risk:
| Scenario | Impact |
|---|---|
| IT Manager leaves | Loses institutional knowledge of your entire IT environment, vendor relationships, and historical decisions. Recruiting a replacement and getting them to full productivity can take many months. |
| Support technician leaves | Loses day-to-day operational knowledge. Helpdesk backlog increases until replacement is hired and trained. |
| Both leave close together | Severe: no one knows passwords, configurations, vendor contacts, or historical context. Business operations are disrupted. |
A good MSP reduces this risk because knowledge is documented, shared across the team, and not dependent on any single individual. Make sure your contract states that the documentation belongs to you.
The 24/7 Coverage Challenge
This is the single biggest advantage of an MSP over an in-house team.
Coverage Comparison
| Time Period | In-House Team | MSP |
|---|---|---|
| Monday-Friday, 8am-6pm | Fully covered | Fully covered |
| Monday-Friday, 6pm-8am | No coverage (on-call phone, may not answer) | 24/7 monitoring with automated alerting and on-call engineers |
| Weekends | No coverage (emergency phone) | 24/7 monitoring |
| Public holidays | No coverage | 24/7 monitoring |
| Leave coverage | Remaining team member covers (reduced capacity) | No impact, team coverage is continuous |
The After-Hours Reality
Standard business hours cover less than a third of the week, and systems do not stop failing at 6pm. With an on-call phone, an after-hours problem is only handled when someone notices it and the on-call person answers. With 24/7 monitoring, an alert reaches an engineer whether or not anyone has reported the problem. To size the risk, multiply your own hourly revenue and wage cost by the hours a typical outage would last before someone responds.
The "On-Call" Problem
Most in-house teams solve after-hours coverage with an on-call phone. This has several problems:
| Problem | Impact |
|---|---|
| Fatigue | The on-call person is exhausted, leading to poor decision-making and burnout |
| Single point of failure | If the on-call person does not answer, nobody else is available |
| Limited expertise | The on-call person may not have the skills to resolve complex incidents |
| No monitoring | Issues are only detected when someone reports them, with no proactive detection |
| Cost | On-call allowances and overtime add to the cost of each person on the roster |
When In-House Makes Sense
There are specific situations where building an in-house IT team is the right choice:
Scenario 1: You Are an IT Company
| Condition | Why In-House Wins |
|---|---|
| IT is your core product or service | You need deep, proprietary IT knowledge that an MSP cannot provide |
| You develop custom software | Your IT team needs to understand your codebase, architecture, and development processes |
| You have unique infrastructure | Custom data centres, proprietary platforms, or specialised hardware require dedicated expertise |
Scenario 2: You Are Very Large (500+ Employees)
| Condition | Why In-House Wins |
|---|---|
| Scale justifies dedicated team | At this size the IT budget is usually large enough to hire a comprehensive team |
| Complex, customised environment | Large companies typically have custom integrations, legacy systems, and unique requirements |
| Regulatory obligations | Highly regulated industries (banking, defence) may require dedicated, cleared IT staff |
Scenario 3: You Have a Strong IT Leader
| Condition | Why In-House Wins |
|---|---|
| Strong CIO/IT Director who can build and lead a team | A great IT leader can attract talent, build capability, and align IT with business strategy |
| Board-level IT representation | IT is represented at the executive table, with budget and strategic influence |
| Investment in training and development | The company invests in continuous upskilling, certifications, and career development for IT staff |
When MSP Wins
For many Australian mid-market businesses (50-500 employees), outsourcing to an MSP is the better choice:
Scenario 1: You Are 50-200 Employees
| Condition | Why MSP Wins |
|---|---|
| IT budget is limited | Not enough to hire a comprehensive team, but enough for a full-service MSP |
| You need diverse skills | MSP provides network engineers, security specialists, and cloud engineers, skills you cannot afford individually |
| You need 24/7 coverage | MSP provides 24/7 monitoring at a fraction of the cost of building it yourself |
Scenario 2: You Have No IT Strategy
| Condition | Why MSP Wins |
|---|---|
| IT is reactive (break-fix) | MSP shifts you from reactive to proactive, preventing incidents before they occur |
| No IT roadmap or planning | A good MSP provides quarterly business reviews and IT roadmapping as standard |
| No compliance framework | MSP implements Essential Eight, APRA CPS 234, and Privacy Act compliance monitoring |
Scenario 3: Your IT Person Is a Single Point of Failure
| Condition | Why MSP Wins |
|---|---|
| One person holds all the passwords and know-how | MSP documents the environment and spreads knowledge across a team |
| Leave, illness, or resignation stops IT in its tracks | Coverage continues regardless of who is away |
| Nobody checks the work | An MSP brings peer review, standard processes, and reporting |
Hybrid Approach: Best of Both
For many Australian mid-market businesses, the best fit is a hybrid model: one internal IT coordinator plus a managed service provider.
How the Hybrid Model Works
| Role | Responsibility |
|---|---|
| Internal IT Coordinator (1 FTE) | Day-to-day IT operations, user support escalation, vendor liaison, internal stakeholder management, project coordination, business knowledge |
| Managed Service Provider (per-user fee, often reduced in a hybrid model) | 24/7 monitoring and support, cybersecurity and Essential Eight compliance, backup and disaster recovery, quarterly business reviews and IT roadmapping, vendor management and cost optimisation |
What the Internal IT Coordinator Does That the MSP Cannot
| Function | Why Internal Person Is Needed |
|---|---|
| On-site presence | Physical troubleshooting, hardware issues, new employee setup, office moves |
| Business context | Deep understanding of company culture, priorities, politics, and informal processes |
| Stakeholder management | Translates technical MSP reports into business language for leadership and department heads |
| Project coordination | Coordinates MSP-delivered projects with internal teams, manages timelines and expectations |
| Advocacy | Represents the company's interests when dealing with the MSP and makes sure the MSP delivers value |
| Emergency response | On-site coordinator during major incidents, facilitates communication between MSP and internal teams |
What the MSP Does That the Internal Coordinator Cannot
| Function | Why MSP Is Needed |
|---|---|
| 24/7 coverage | Internal coordinator works business hours only, while the MSP provides round-the-clock monitoring and response |
| Diverse skill set | Internal coordinator is a generalist, while the MSP provides specialists in networking, security, cloud, and more |
| Strategic advisory | Internal coordinator is too busy with operations to plan ahead, while the MSP provides quarterly reviews and IT roadmapping |
| Knowledge redundancy | If the internal coordinator leaves, the MSP retains documentation and institutional knowledge |
| Cost efficiency | MSP spreads fixed costs (monitoring platform, security tools, management tools) across multiple clients, which is cheaper than building it yourself |
The Hybrid Cost Advantage
| Component | Hybrid Model | Fully In-House | Difference |
|---|---|---|---|
| Annual cost | Usually lower | Usually higher for the same skills | Compare with your own figures |
| Skill diversity | High (MSP team) | Low (a few generalists) | Significant |
| 24/7 coverage | Yes (MSP monitoring) | No (on-call only) | Critical |
| Single point of failure risk | Low (MSP team + internal coordinator) | High (a few people) | Risk reduction |
Frequently Asked Questions
How much does an in-house IT team cost?
For a 100-user mid-market company, a minimum viable in-house team (IT Manager, Support Technician and Cybersecurity Analyst) costs three salaries plus super (12% from 1 July 2025), on-costs, software, training, recruitment and the cost of downtime when the team is unavailable. Use current salary data for your city to price it.
How much does an MSP cost?
It depends on users, scope, industry and support hours, and there is no reliable published benchmark. Get quotes against the same written scope and add out-of-scope work and downtime to the base fee. The quality and scope of what is included varies widely, so compare proposals line by line.
Can I start with in-house and switch to MSP later?
Yes, but the transition is more difficult than starting with an MSP. When you build an in-house team, processes, documentation, and knowledge are often informal and person-dependent. Transitioning to an MSP requires formalising this knowledge, which takes time. It is easier to start with an MSP and add an internal coordinator later.
Can I start with MSP and bring IT in-house later?
Yes, and this is a sensible approach for companies that want to build internal capability over time. The MSP builds the infrastructure, documentation, and processes. When you are ready to hire internally, the MSP hands over everything in a structured transition. You get immediate capability now and internal capability later.
What is the biggest mistake companies make in this decision?
The biggest mistake is hiring an IT Manager and expecting them to be a network engineer, cybersecurity analyst, cloud architect, and strategic advisor all at once. No single person has all these skills. An MSP provides a team of specialists. An in-house hire provides one generalist.
Does the hybrid model work for smaller companies (20-50 employees)?
Yes, but the economics change. For a 20-50 employee company, the MSP fee alone may be sufficient without an internal coordinator. Add an internal coordinator only if you have significant on-site needs (hardware, office moves, physical troubleshooting) that the MSP cannot handle remotely.
Need Help Deciding?
The right model depends on your size, your on-site needs, and how much risk sits with one or two people today. If you want to compare an in-house, outsourced, or hybrid setup for your business, see our managed IT services or get in touch.