Monthly Ops Review: What to Look At | Operations And Monitoring Field Guide

You don't wait a year to check your car's oil. Same logic applies to IT operations.

A monthly ops review catches problems before they become emergencies. It verifies that things you assumed were working actually are. And it gives you visibility into trends before they become crises.

What this solves

Finds problems before they escalate. A failing hard drive becomes a server outage. A declining SSL certificate becomes a website outage. Monthly checks catch these.

Verifies backup health. Backups exist, but are they working? Monthly verification prevents restore surprises.

Tracks spending. See where money goes. Spot unnecessary subscriptions. Plan for large renewals.

Maintains documentation. Things change. Your documentation should keep up.

Creates accountability. Regular reviews mean regular check-ins. Nothing falls through the cracks.

What to review

Infrastructure health

Disk space trends. Where are you at on each server? Are any drives above 75%? Any trending upward quickly?

Hardware age and health. Any servers approaching 5 years old? Any with concerning SMART status?

Certificate expirations. Any SSL certificates expiring in the next 90 days? Any that already expired and are still working somehow (broken renewal)?

Patch status. Are all systems current on patches? Any critical patches pending?

Security posture

Antivirus status. Any endpoints not checking in? Any with outdated definitions?

Failed login attempts. Any unusual patterns? Brute force attempts? Compromised accounts?

User accounts. Any accounts that shouldn't exist? Any former employees still active?

Recent security events. Any malware detections? Any blocked intrusion attempts?

Backup verification

Backup completion. Did all backups run successfully? Any failures?

Restore testing. When was the last time you tested a restore? Was it successful?

Backup retention. Are you keeping enough history? Ransomware could hit today — do you have clean backups from before today?

Changes and incidents

Recent changes. What changed in the last 30 days? Any that caused issues?

Recent incidents. Any outages or problems? What happened and what did you learn?

Open items. Any known issues waiting to be resolved? Any pending vendor fixes?

Financial review

Recurring charges. Any new subscriptions? Any old subscriptions nobody uses?

Upcoming renewals. Any large renewals coming in the next 60-90 days?

Budget vs. actual. Are you tracking against IT budget? Any surprises?

What can go wrong

Reviews that don't happen. "We should review this monthly" becomes "we haven't looked at this in six months."

Reviews without action. You find problems, make notes, do nothing. The review becomes theater.

Incomplete scope. You check server disk space but miss the fact that your backup software subscription expired.

No ownership. Nobody is responsible for the review, so nobody does it.

What it costs (honest ranges)

DIY (owner or internal IT): $0, but 2-4 hours monthly of staff time.

MSP-managed review: Usually included in managed services. If not, $200-$500/month for formal monthly reporting.

Consultant-led review: $500-$1,500 per review if done quarterly by an outside party.

Problem found late cost: Depends on the problem. Failed hard drive caught early = $500. Failed hard drive that took down your server = $5,000+ in downtime.

Minimum viable implementation

Schedule it. Put it on the calendar. Monthly recurring. One hour minimum.
Use a checklist. Don't rely on memory. Check the boxes, then dig into anything that looks off.
Assign a reviewer. One person owns this. If it's the owner, fine. If it's IT, report to the owner.
Document findings. Write down what you found. Write down what needs to be done.
Follow up. Review the last review's action items. Did they get done?

Vendor questions (copy/paste)

Ask your IT vendor or MSP:

Do you provide monthly operational reports?
What metrics do you include?
Do you have a documented review process?
What did you find in last month's review?

Ask yourself:

When did we last review our SSL certificates?
Do we test our backups monthly?
Who reviews our security logs?
Are we tracking IT spending against budget?

The monthly ops review isn't about finding exciting problems. It's about confirming that the things you think are working actually are. Quiet confidence is the goal.