What RMM is, and why your IT provider depends on it

If you've hired an IT provider, there's a small program on each of your computers that you've probably never noticed. It's called an RMM agent, and it's how nearly all the work gets done.

What it stands for

RMM means remote monitoring and management. It has two halves.

Monitoring. The agent reports on the health of each computer, all day: how full the disk is, whether updates have installed, whether the security software is running, whether a hard drive is showing signs of failing.

Management. It lets your provider act on that computer from wherever they are: install an update, fix a setting, restart a stuck service, or connect to the screen to help the person using it.

What it changes for your firm

Without it, IT is reactive. Something breaks, someone calls, someone eventually turns up. With it, a lot of problems are dealt with before anyone at your firm knows they existed.

• A disk that's nearly full gets cleared before the computer slows to a crawl.
• A failing drive gets replaced before it takes a week of work with it.
• A missed update is caught and installed, which matters more than it used to. See why software updates matter.
• Security software that has stopped working is noticed the same day, not at the next incident.
• A help request is answered in minutes, because the technician can see the screen without traveling.

It's also an inventory

The agent knows what you own: every computer, what's installed on it, how old it is, whether it's encrypted, when it last checked in.

That list is more useful than it sounds. It's how you find the laptop nobody has seen since a departure, the computer still running software its maker abandoned, and the answer to an insurer who asks whether every device is protected.

The catch: it's a powerful tool

Anything that can control every computer in your firm is a target. If an attacker took over your provider's RMM, they would have the same reach your provider has. It has happened to providers, and their clients paid for it.

So it's fair to ask your provider how they protect it:

• Is multi-factor authentication required for every technician who can use it?
• Who at your company can reach our computers, and is each action recorded?
• Do you ask before connecting to someone's screen?
• What happens to the agent if we leave you?

A good provider answers these without hesitation. They're on our list of ten questions to ask an IT provider.

What RMM doesn't do

It isn't security software. It can confirm your protection is running, but it doesn't detect an attack. That's the job of antivirus and EDR. And it doesn't replace backups: it can tell you a backup failed, but it isn't one.

Think of it as the instrument panel and the steering wheel. You still need brakes.

The short version

RMM is what turns IT support from "call us when it breaks" into "we saw it and fixed it." It's included on every computer in every plan we offer, as part of device monitoring and patching.