Managed IT Services in Salt Lake City

What managed IT services cost in Salt Lake City

Salt Lake City quotes for managed IT generally fall between $100 and $250 per user per month, according to published 2026 pricing guides ¹². Plans near $100 tend to cover remote support and monitoring; those near $250 add managed detection, security training and planning. Security-heavy bundles can reach $300 ².

Local wages sit almost exactly at the national figure. The Salt Lake City-Murray median was $99,110 for network and computer systems administrators in May 2025, against $99,130 nationally, and $62,410 for computer user support specialists ⁵⁹⁷. Benefits add 30% of total compensation ⁸, bringing a loaded administrator to about $141,600 and a support specialist to about $89,200 (our calculation).

A 25-person firm on a managed plan spends $30,000 to $75,000 a year. Our managed IT pricing guide explains per-user and per-device models.

Salt Lake County's business base and IT services market

Salt Lake County had 35,732 business establishments in 2023, including 7,949 with 10 to 49 employees and 1,958 with 50 to 249 ¹⁰. The county also counted 586 establishments in computer systems design and related services ⁴, about 1.6% of all establishments in the county (our calculation). That category includes software firms and consultancies as well as MSPs.

Finance carries more weight here than in most metros. HUD's 2020 market analysis found financial activities made up 8% of nonfarm payrolls against less than 6% nationally, with Zions Bancorporation and Goldman Sachs among the employers ¹¹. The University of Utah, the State of Utah and Intermountain Healthcare are among the largest employers ¹¹. In August 2026 the metro had 154,900 professional and business services jobs, 120,900 government jobs, 106,100 education and health services jobs and 67,200 financial activities jobs out of 861,300 ¹².

For IT buyers that means:

• Non-bank lenders, mortgage brokers and tax preparers are covered by the FTC Safeguards Rule ¹³. It requires MFA and encryption of customer data, and firms with data on at least 5,000 consumers must also put their risk assessment in writing ¹³. See our financial services IT guide.
• Clinics and health care vendors need HIPAA safeguards, outlined in our HIPAA compliance services guide.

Utah's cybersecurity affirmative defense, privacy law and breach rule

Utah's Cybersecurity Affirmative Defense Act has been in effect since May 5, 2021 ³. It lets a business raise an affirmative defense to a claim that it failed to implement reasonable security controls ³. The condition is that the business created, maintained and reasonably complied with a written cybersecurity program that was in place when the breach happened ³.

Timing decides whether it helps. Picture a Salt Lake mortgage broker that put its program in writing two years ago, had its provider run MFA, patching and backups under it, and kept the evidence. If phishing later exposes client files and a client sues over weak security, the broker may be able to raise the defense, because the program existed and was followed when the breach happened ³. A competitor that writes its policies the week after an attack cannot. As a mortgage broker, the firm also owes MFA and encryption under the FTC Safeguards Rule ¹³, so one written program can serve both purposes.

Separately, Utah Code 13-44-201 requires businesses that keep personal information to implement and maintain reasonable procedures to prevent its unlawful use or disclosure ¹⁴.

When a breach occurs, Utah requires notice to affected residents in the most expedient time possible without unreasonable delay. If misuse involving 500 or more Utah residents has occurred or is reasonably likely, the Attorney General and the Utah Cyber Center must also be notified ¹⁵. At 1,000 or more residents, the consumer reporting agencies are added ¹⁵.

The Utah Consumer Privacy Act, effective December 31, 2023, reaches fewer businesses than most state privacy laws. A business must have annual revenue of $25 million or more before it can be covered at all ⁶¹⁶. It must then also control or process personal data of 100,000 or more Utah consumers a year, or 25,000 or more while earning over half of gross revenue from selling personal data ⁶¹⁶. Most small Salt Lake City firms are outside it. Confirm with counsel.

Utahns filed 9,903 complaints with the FBI's IC3 in 2025, reporting $195.4 million in losses ¹⁷.

Cybersecurity services in Salt Lake City

For a Salt Lake City firm, the best security spend is the one that also builds the written program Utah law rewards. That means MFA, endpoint detection and response, email filtering, patching and restore-tested backups, each with a written policy and evidence it is working.

Microsoft research found MFA reduces account compromise risk by 99.22% ¹⁸. Managed detection and response costs about $8 to $25 per endpoint per month for small and midsize firms ¹⁹. A vCISO can own the written program; published retainers for firms under 50 employees run $1,500 to $4,000 a month ²⁰. Our cybersecurity for small business guide and vCISO services guide cover both.

IT support options and choosing a Salt Lake City provider

Firms with an internal IT lead often pick co-managed IT. Expect $45 to $175 per user per month, depending on scope, in one provider's 2026 published figures ²¹. Our page on how co-managed IT works covers the split.

When comparing Salt Lake City IT services firms, ask which framework the provider documents your controls against, who keeps the written program current, and how quickly a technician reaches your site. Also ask which current clients face the FTC Safeguards Rule or HIPAA, and what evidence the provider hands them each quarter. Our checklist for choosing an MSP covers contracts and exit terms. For other Mountain West offices, compare managed IT in Denver, Las Vegas and Phoenix, or see the managed IT services overview.