There's no fixed number. A tidy fleet of 15 identical laptops with one owner is a different job than a mixed bag of 15 devices across three platforms with no inventory and unclear ownership. What actually determines when device management stops being a spreadsheet-and-goodwill job is less about headcount and more about a few specific gaps.

Start with a real inventory

The first question is always the same: how many devices does the business actually have, who has each one, and what's on it? A surprising number of small businesses can't answer this cleanly — devices bought over the years, some personal, some company, no single list anyone trusts. A full device inventory is the unglamorous foundation everything else depends on.

Deployment and configuration

Once there's a real inventory, the next question is how a new device gets set up. Is it a consistent, repeatable process — or does it depend on whoever happens to be free that day, working from memory? Consistent deployment and configuration means every device leaves the same door with the same baseline, regardless of who set it up.

Lifecycle tracking

Devices have a lifespan: purchase, active use, and eventually retirement or reassignment. Lifecycle tracking means knowing where each device is in that timeline — which is what prevents both ends of the problem: paying for licenses on devices no one uses anymore, and devices quietly aging past the point where they're still secure.

Security baseline enforcement

Every managed device should meet a minimum bar — encryption on, screen lock enabled, security updates current — enforced rather than just requested. This is the layer that turns "we have policies" into "we can verify compliance," which matters a lot more once a client or a cyber insurance renewal actually asks.

Offboarding support

The moment someone leaves is when gaps in device management become visible fast. Clean offboarding means the device is recovered or wiped, access is revoked, and the device re-enters inventory as available — rather than becoming an unaccounted-for laptop with lingering access to company accounts.

When it's worth bringing in help

A few signals tend to show up together: a mixed device fleet across platforms, growing headcount that's outpacing informal tracking, no current inventory anyone fully trusts, or security questions from a client or partner that are hard to answer with confidence. Any one of those is a reasonable point to get a second set of eyes on it.