The MSP quarterly business review is one of the most-promised and least-delivered components of managed services relationships. Promised as a strategic forum; delivered too often as a marketing pitch with stale numbers. A useful QBR is a working session where both sides confront what's working, what isn't, and what should change. Here's what an actually-useful QBR looks like.
What QBRs Are Supposed to Do
The purpose of a QBR is to make sure the customer is getting what they're paying for and to surface decisions that need leadership attention. That means:
- Reviewing operational metrics against commitments and trends
- Surfacing risks the customer should be aware of
- Identifying improvement opportunities
- Aligning on the roadmap for the next quarter
- Making decisions that require business-level input
- Strengthening the working relationship
None of that requires a polished slide deck. It requires honest material.
The QBR Agenda That Produces Value
A working QBR agenda for a 90-minute session:
- Operational metrics review (15 min) — ticket volume, response times against SLA, top issue categories, resolution times, customer satisfaction trends
- Security posture review (15 min) — incidents detected, response actions taken, vulnerability status, control effectiveness, threat landscape changes affecting the customer
- Project status (10 min) — projects completed, projects in flight, projects coming up, blockers and decisions needed
- Risk register review (10 min) — what risks have been identified, what's been mitigated, what new risks have emerged
- Roadmap discussion (20 min) — next-quarter priorities, longer-term direction, budget implications, decisions the customer needs to make
- Open issues and feedback (15 min) — what's working, what isn't, what should change in the working relationship
- Next steps and action items (5 min) — specific commitments with owners and dates
Notice what's not on this agenda: vendor introductions, marketing material, generic industry trends not specific to the customer, sales pitches for additional services.
The Specific Data Worth Reviewing
Useful QBR material includes:
- Ticket trend lines over the past 4 quarters (not just the current quarter)
- SLA compliance percentage by priority level
- Top 5 issue root causes — and what's being done to address them at the root
- Customer-satisfaction survey results from tickets closed during the period
- Significant incidents with root cause analysis and prevention plans
- Security incidents detected (or absence of them) with context
- Patching status across the customer's environment
- Backup test results from the period
- End-of-life equipment approaching replacement timing
- Vendor contract renewals coming up
- Compliance milestones if applicable
The Conversations That Should Happen
Beyond data review, QBRs should produce specific conversations:
- Are we as a provider meeting your expectations? Where are we falling short?
- What's changing in your business that we should know about?
- What's the worst-case scenario you'd want us to be more prepared for?
- What technology decisions are coming up in the next 6 months?
- What should we be doing that we're not currently doing?
- What are we doing that doesn't produce value and should stop?
These questions surface issues that operational metrics don't capture. Honest answers improve the relationship; defensive answers signal a relationship in trouble.
What a Bad QBR Looks Like
The QBR antipatterns:
- 40 slides of generic industry trends and vendor product marketing
- Metrics presented without comparison to prior quarters or to commitments
- No discussion of incidents that occurred during the quarter
- No decisions for the customer to make
- No commitments coming out of the meeting
- Senior leadership of the MSP not present
- Same agenda quarter after quarter regardless of business changes
- Customer talked at, not with
If your current QBRs look like this, the QBR is theater rather than a working session. That's a sign the broader relationship may need attention.
How to Push for Better QBRs
If your QBRs aren't delivering value, the practical levers: ask for specific data ahead of the meeting (not slides — the underlying numbers), request the agenda above instead of the standard vendor agenda, bring specific questions to the meeting, push back on generic content. Most MSPs will adjust to customer expectations when those expectations are clearly stated. If you'd like help structuring better QBRs with your current provider or scoping what a useful working relationship looks like, a free 30-minute conversation can frame the approach.
Leonidas is a managed IT services provider, cybersecurity consulting firm, and unified communications consultancy serving businesses across industries. We offer free 30-minute assessments. Contact us or call 850-614-9343.