Fully Managed or Co-Managed IT: Which Model Fits Your Company?

By Harry Curran, Chief Operations Officer, Vertikal6

Published October 5, 2026

Fully managed IT fits a company with no one on staff who owns technology full time. Co-managed IT fits a company that has an IT lead or team and needs more capacity, after-hours coverage or better tools. At Vertikal6, the conversation starts with one question: when a critical system fails at 11 p.m., whose phone rings first?

If the answer is “whoever we call,” the company already depends on an outside partner and should give that partner the full scope. If the answer is a named person on your payroll, co-managed IT gives that person backup and keeps them in charge.

What is the difference between fully managed and co-managed IT?

Fully managed IT means an outside provider runs your technology end to end. That covers the help desk, monitoring, patching, security tools and the long-term plan. Co-managed IT means your internal team keeps ownership, and the provider takes on the work you assign, such as frontline tickets, overnight coverage or infrastructure monitoring.

elevate™ is Vertikal6’s managed IT platform. It is offered as a fully managed service or as co-managed services that support an existing IT team. elevate™ Foundations is the fully managed version: a 24/7 service desk, proactive monitoring, cybersecurity support and virtual CIO strategy under one agreement. Co-managed services let a company hand off specific parts of the job, and Vertikal6 fully owns whatever it takes on. The co-managed service desk handles Tier 1 and Tier 2 support plus after-hours or overflow coverage. Co-managed infrastructure hands the network, servers, firewalls and backups to Vertikal6, which manages them end to end and keeps them running, with patching, updates and alerting built in.

Who owns what

The two co-managed services can stand alone or work together, and the split is set to fit the team you already have.

Which model fits a company your size?

The size of your IT team predicts the right model better than the size of your company. A 150-person firm with no IT staff needs different support than a 150-person firm with a two-person IT department.

• No internal IT owner: fully managed IT gives the company a complete department on day one.
• One or two IT generalists: a co-managed service desk takes routine tickets off their plate so they can work on projects.
• An established IT team: co-managed infrastructure hands the network, servers, firewalls and backups to Vertikal6 to run end to end, so the team can focus on users and projects.

Hiring is the usual alternative, and each hire covers one person’s hours and one skill set. According to the U.S. Bureau of Labor Statistics wage data released in May 2026, network and computer systems administrators earned a mean annual wage of $103,680 nationally, and information security analysts earned $132,510. Those figures are salary alone, before benefits. Vertikal6 offers both models on the same platform, so the choice comes down to what your team needs today.

Five questions that settle the decision

1. Who owns technology today, and how much of that person’s week goes to tickets? If most of it does, a co-managed service desk frees that time for projects.
2. Do you need coverage outside business hours? Fully managed includes 24/7 support. Co-managed adds after-hours coverage where your team needs it.
3. Who patches your systems, and how fast? According to Verizon’s 2026 Data Breach Investigations Report (May 2026), 31 percent of breaches started with the exploitation of a vulnerability. That is the first time in the report’s 19 years that vulnerabilities passed stolen credentials as the leading way in. Whoever owns patching needs the tools and the hours to keep up.
4. Who builds the three-year roadmap and budget? A virtual CIO builds three-year plans that tie technology spending to business goals.
5. What does your internal team want to keep? Co-managed IT works best when your team keeps the work it does well and hands off the rest.

Making a co-managed partnership work

A co-managed model works when responsibilities are written down, both teams see the same tickets, and escalation contacts are named before the first incident.

• Write down the split. List who owns endpoints, servers, firewalls, backups, Microsoft 365 administration and vendor contacts.
• Share one view. Both teams should work from shared ticket visibility and reporting.
• Define access. Verizon’s 2026 report found that breaches involving a third party made up 48 percent of all breaches, up 60 percent. Any provider with administrator access is a third party, so document who holds admin credentials and how often that access is reviewed.

Budgeting for either model

Gartner forecasts that worldwide spending on IT services will reach $1.57 trillion in 2026, up 5.3 percent (July 2026). The same forecast notes that budgets are strained by inflation and rising hardware and memory costs. Both models turn unpredictable IT spending into a monthly figure. Fully managed IT prices the whole scope, and co-managed IT prices only the pieces you assign.

A client example

Vertikal6 has co-managed IT for a Rhode Island healthcare provider since 2016, using the co-managed service desk and co-managed infrastructure together. We run their first-level help desk, resolve the issues we are set up to fix and route the rest to their internal staff. We also fully support their infrastructure, so their IT team can focus on frontline healthcare workers and the applications those workers need to do their jobs. Even with both services in place, we fit into their team the way they need us to, not the other way around.

Quick Answers

Can we change models later?

Yes. The elevate™ framework is modular and built to adjust as needs change, so the scope can shift as your internal team grows.

What happens to our IT staff under co-managed IT?

They stay in charge. Vertikal6 works alongside them and fully owns whatever they hand off, whether that is frontline tickets or the network, servers, firewalls and backups.

Which security services can be added to a managed IT agreement?

Vertikal6 offers optional enhancements including 24/7 managed detection and response (Protect), multi-factor authentication (Verify), security awareness training (Aware), and backup and recovery (Recover).