What Is Co-Managed IT? A Plain-English Guide for Jacksonville Businesses

By Earl Kelly III, MCP, CEO of Cydian Group · Reviewed by Earl Kelly III, MCP · Updated October 2026

Short answer: Co-managed IT is a partnership between your in-house IT person or team and an outside managed IT provider. Your person keeps day-to-day support and final say. The provider adds around-the-clock monitoring, security tools, patching, backup testing, and coverage when your person is out, with the split written down.

In Jacksonville, a lot of good businesses run on one good IT person. Law firms downtown and in San Marco, practices along the Southside medical corridors, agencies on the Westside, manufacturers out by the port: someone in the building knows where everything is and how it all connects. That person is valuable. They're also one person.

Co-managed IT is how you keep that person and stop depending on them for everything.

What does co-managed IT actually mean?

Think of it as backup for your IT person. You already have someone who knows your office. A co-managed provider gives them the tools, the security coverage, and a team behind them, so one person isn't your only line of defense.

It isn't outsourcing your IT department, and it isn't a staffing agency. Your IT person stays in charge of their areas. The provider takes on the work that's hard for one person to do well: watching systems overnight, patching dozens of machines on schedule, running security tools, and proving backups actually restore.

How does co-managed IT work day to day?

It starts with a written split of responsibilities. At Cydian a typical one looks like this:

• Your IT person keeps: day-to-day support for your staff, relationships with your vendors, knowledge of your systems, and final say on changes.
• Cydian adds: around-the-clock monitoring and alerts, patching at scale, security tools and email protection, and backup checks with restore tests.
• We share: projects and upgrades, vacation and sick-day coverage, quarterly reviews, and documentation.

Day to day, your staff still go to your IT person. When an alert fires at night, the provider sees it and acts on it within the agreed scope. When your IT person goes on vacation, there's coverage. Once a quarter, both sides sit down and review what's working, what's at risk, and what's next.

Who is co-managed IT for?

It fits businesses that already have some IT capability in-house and want more depth without replacing anyone. In our experience that includes:

• Law firms with one IT person, where privileged files, client confidentiality, and now AI use under ABA Formal Opinion 512 all land on one desk.
• Surgery centers with a practice administrator who handles technology alongside everything else, under the HIPAA Security Rule.
• Insurance agencies where the office manager runs the agency management system and fields the carrier questionnaire. See our page on the FTC Safeguards Rule for agencies.
• Manufacturers whose IT person also keeps the shop floor and ERP running, with CMMC requirements showing up in defense contracts.
• Growing teams that have outgrown one person, and companies with an internal IT department that want security coverage and overnight monitoring.

What does a co-managed IT provider handle?

The specifics depend on your split, but these are the most common pieces:

Monitoring and alerts. Servers, workstations, firewalls, and cloud accounts are watched around the clock. Problems get flagged, and often fixed, before your staff notices.

Patching at scale. Operating systems and common applications are updated on a schedule, tested, and reported. This is one of the first things to slip when one person is busy.

Security tools and email protection. Endpoint protection, email filtering, sign-in protection (multi-factor authentication), and the alerts that come with them. Enterprise-grade tools are expensive to license and run for one office; a provider spreads that cost.

Backup checks and restore tests. "Backup successful" isn't the same as "we can restore." A good provider tests restores and shows you the result. If it's never been restored, it isn't a backup yet. See backup and disaster recovery.

Microsoft 365 hygiene. Licensing, security defaults, and email protection set up right and kept that way.

Documentation. Network diagrams, admin account lists, recovery steps, and a record of who did what. This is what you hand a carrier, auditor, or client when they ask.

How is co-managed IT different from hiring a second IT person?

A second hire gives you another pair of hands. It doesn't give you a monitoring platform, a security tool stack, overnight coverage, or a team with experience across many environments. You also take on recruiting, training, and turnover.

Co-managed IT gives your existing person a team and tools behind them, with a predictable monthly cost. At Cydian it's priced as a flat monthly fee based on users or devices and the pieces we take on, quoted in writing after the split is agreed.

Why does local matter for co-managed IT in Jacksonville?

Most co-managed work happens remotely, and that's fine. Local still matters in three ways:

1. Hurricane season. When a storm closes the office, the plan has to already be in place: off-site backups, cloud access, phones that ring on a laptop. A Jacksonville provider plans for Northeast Florida weather because it lives with it.
2. Hands on hardware. When something needs a person on site, like a cutover or a new office, distance matters.
3. Accountability. You should be able to call a local person and know who did what.

Cydian has been based at 3609 Hendricks Ave in San Marco since 2010, with a second office in Tampa. Learn more about our Jacksonville managed IT.

What should you ask before signing a co-managed agreement?

• Is the split written down, and can we change it later?
• Who approves changes in my IT person's areas?
• What does after-hours coverage include, and who gets the alert?
• How are backups verified? When was the last restore test, and can we see it?
• Can my IT person see the same dashboards and reports you see?
• What happens if my IT person leaves? Can we move to fully managed without starting over?
• How is it priced, and what's out of scope?

If a provider can't answer these clearly, keep looking.

Frequently asked questions

What is co-managed IT in simple terms? It's a partnership where your in-house IT person keeps day-to-day support and final say, and an outside provider adds monitoring, security tools, patching, backup testing, and coverage. The responsibilities are split in writing.

Will co-managed IT replace our IT person? It shouldn't. The goal is to make your IT person more effective, not to replace them. At Cydian, you're in charge, and your IT person approves changes in their areas.

Is co-managed IT available for small Jacksonville businesses? Yes. It's often the best fit for small and mid-sized businesses with one IT person, because they get enterprise-grade tools and coverage without adding headcount.

What's the difference between co-managed IT and managed IT? With managed IT (fully managed), the provider runs everything. With co-managed IT, your person keeps the day-to-day and the provider fills the gaps around them. See co-managed vs. fully managed.

How quickly can co-managed IT start? It starts with a conversation and a review of your environment, then a written split. Timing depends on your systems and the scope you choose.

The next step

If you have a trusted IT person and you're wondering whether they need backup, let's talk. We'll look at what they handle today, where the gaps are, and what a written split could look like. Start with a real conversation, read more about co-managed IT, or see what fully managed Cydian Secure covers.