How to Choose and Switch to a Managed IT Service Provider

The short answer: look for a managed IT service provider that publishes response times by priority and reports on how often it hits them, gives you a named engineer who knows your setup, runs security and patching as standard rather than as extras, and puts exit terms in writing. Ask every shortlisted provider for its measured performance over the last quarter, not its targets. If you're frustrated with your current IT support, the cause is usually one of three things: slow responses, the same problems coming back, or no plan beyond the next ticket. A good provider can show you how it prevents all three. Switching is safe when the new provider runs a documented handover, collecting credentials, licences, backups and documentation from the outgoing provider before anything is changed.

This guide covers how to tell whether it's time to move, the criteria that separate good providers from the rest, the red flags to watch for, and the exact process we follow when a business switches its IT to us.

Our own numbers, so you know what good looks like

These are the figures we report to clients. Ask any provider you're considering for the same figures, measured over the same kind of period.

Our contracted response targets are published on our managed services page: critical issues within 15 to 30 minutes, high priority within 1 hour, medium within 2 hours and low within 4 hours.

Frustrated with your current IT support? Check whether it's the provider

Every provider has a bad week. These are the signs that the problem is the service itself, and that moving is worth the effort:

• Tickets sit unanswered. You chase updates instead of receiving them, and urgent issues wait in the same queue as password resets.
• The same faults keep returning. Each ticket is closed, but nobody looks for the root cause, so the slow laptop or dropped VPN comes back next month.
• You only hear from them when something breaks. No reviews, no reports, no roadmap.
• Nobody can tell you when your backups were last tested. If the answer is "they run every night", that's not the same as a restore that worked.
• Every small change becomes a chargeable project. You can't predict the monthly bill.
• Security is left to you. MFA, patching, email filtering and device encryption are offered as add-ons, or not mentioned at all.
• The people who knew your business have gone. After a takeover or staff turnover, each engineer starts from zero. If your provider has recently been bought, read our guide on what to check when your MSP is acquired by private equity.

If three or more of these sound familiar, raise them formally with your current provider first. If nothing changes within a month, start looking. For a fuller self-check, see 10 warning signs your business needs professional IT support.

What to look for in a managed IT service provider

These eight criteria matter more than the length of a provider's service list. For each one, here's what good looks like and the question that tests it.

1. Published, measured response times

Good: response targets set by priority, written into the contract, and a monthly report showing how often they were met. Ask: "What was your median first response time last quarter, and what percentage of tickets met the SLA?" A provider that only quotes targets, never results, is telling you something.

2. A team that knows your business

Good: a named account lead and a small group of engineers who learn your systems, backed by documentation so that knowledge doesn't leave when one person does. Ask: "Who will actually look after us, and where is our environment documented?"

3. Proactive monitoring and maintenance

Good: patching, monitoring and alerting included as standard, with recurring faults investigated for a root cause. Ask: "How do you spot problems before our staff report them, and how do you deal with repeat issues?"

4. Security built in, not bolted on

Good: multi-factor authentication, endpoint protection, email security, patching and tested backups as part of the core service, with support for Cyber Essentials where you need it. Ask: "Which security controls are included in the monthly fee, and which cost extra?"

5. Backups that are tested and evidenced

Good: scheduled restore tests with written results, covering Microsoft 365 as well as servers and files. Ask: "When did you last test a restore for a client like us, and can we see the report?"

6. Clear, predictable pricing

Good: a per-user or per-device monthly fee with a written list of what's included, what's a project, and how prices can change at renewal. Ask: "What would have been billed on top of the monthly fee for a typical client last year?"

7. Fair contract and exit terms

Good: a reasonable notice period, a cap on annual price rises, and a written commitment to hand over credentials, documentation and data without an exit fee. Ask: "If we leave, what do you hand over, how quickly, and at what cost?"

8. Plain-English communication and planning

Good: regular service reviews with a director or account lead, a technology roadmap tied to your business plans, and reports you can understand without an IT background. Ask: "What does a quarterly review with you look like? Can we see an example report?"

A local provider adds value when you need someone on site quickly. If you're in the East Midlands, our IT support in Nottingham covers both remote and on-site work.

Red flags when choosing a new provider

Walk away, or at least slow down, if you see any of these during the sales process:

• Targets without results. They'll promise a 15-minute response but can't show you what they actually achieved.
• No questions about your business. A proposal that arrives before anyone has looked at your systems is a template, not a plan.
• Long lock-ins with weak SLAs. Three or five-year terms where you commit far more than they do.
• Vague exit terms. No written handover commitment, or exit fees for releasing your own data and admin access.
• Security as an upsell. MFA, patching or backup priced as optional extras.
• A price far below everyone else's. The difference usually comes back as chargeable projects, or as a service that only reacts when things break.
• No references from businesses like yours. Any established provider should be able to put you in touch with two or three current clients of a similar size.

How to switch IT provider: step by step

Switching sounds risky because your current provider holds the keys. A structured handover removes most of that risk. This is the process we run when a business moves its IT to Cloudworks. Whoever you choose, expect something similar.

Step 1: Check your current contract

Find your notice period, which is commonly 30 to 90 days, the renewal date and any exit clauses. Diarise the date notice must be given. Don't serve notice until your new provider has agreed a start date.

Step 2: Discovery and assessment

The new provider reviews your users, devices, Microsoft 365 tenant, network, servers, line-of-business applications, backups and security settings. You should receive a written summary of what they found, including any urgent risks.

Step 3: An agreed onboarding plan

A dated plan covering who does what, the order of changes, and how disruption to staff will be kept to a minimum. Most work should happen in the background or out of hours.

Step 4: Collect everything from the outgoing provider

Use the handover checklist below. Your new provider should request these items on your behalf, but the request needs to come with your authority, because the data and accounts belong to you.

Step 5: Secure and take control

Before go-live, the new provider rotates admin passwords, confirms MFA on every admin account, checks your backups with a test restore, and moves Microsoft licences across. They then deploy their own monitoring and security tools.

Step 6: Go-live and introductions

The service desk switches over on a set date. Your staff get one short note explaining how to log a ticket. The old provider's monitoring agents and remote access tools are removed.

Step 7: Remove old access and review at 30 days

Once the handover is confirmed complete, the outgoing provider's delegated admin (GDAP) access, VPN accounts and remote tools are removed. A review after the first 30 days checks that nothing was missed and agrees the improvement roadmap.

At Cloudworks, the hands-on onboarding work typically takes 8 hours, based on our last 5 client onboardings, and is timed to fit around your notice period. We work directly with your current provider throughout, so you don't have to manage the handover yourself.

Handover checklist: what to get from your outgoing provider

• Global admin access to your Microsoft 365 / Entra ID tenant, plus a list of every admin account
• Microsoft licence details and the CSP subscription transfer, or the date the licences renew
• Domain registrar login, and DNS hosting access for every domain you own
• Firewall, router, switch and Wi-Fi admin credentials and configuration backups
• Server, NAS and hypervisor admin credentials
• Backup system access, retention settings and the date of the last successful restore test
• Any password manager vaults or shared credential stores they hold for you
• Asset list: users, laptops, desktops, mobiles, printers and their warranty dates
• Network diagram and site documentation
• Line-of-business software: versions, licence keys and supplier support contacts
• Third-party contracts they manage for you: broadband, phone lines, security software, certificates
• Open tickets and known issues
• Confirmation of the date their remote tools and admin access will be removed

Questions to put to every shortlisted provider

1. What were your measured response and resolution times last quarter?
2. Who will be our named contact, and who are the engineers behind them?
3. Which security controls are included as standard?
4. How and when do you test backups, and can we see the evidence?
5. What is excluded from the monthly fee?
6. How do you run onboarding, and how long does it take for a business our size?
7. What do you hand over if we leave, and is there any charge?
8. Can we speak to two clients similar to us?

For more detail on day-to-day service, see what to expect from a small business managed service provider. If you're a Nottingham or East Midlands SME, our managed IT support buyer guide for Nottingham SMEs covers local considerations in more depth.

Frequently asked questions

I'm frustrated with my current IT support. What should I look for in a new managed IT service provider?

Look for measured response times reported to you every month, a named team that documents your systems, security and patching included as standard, tested backups, and written exit terms. Ask for last quarter's actual performance, not just the targets.

What factors should I consider when selecting a managed IT service company?

Responsiveness, continuity of the people looking after you, proactive monitoring, built-in security, evidenced backups, transparent pricing, fair contract and exit terms, and plain-English reporting. References from businesses of a similar size and sector are the best check on all of these.

How do I switch to a different IT services provider without disruption?

Check your notice period, then let the new provider run discovery and agree a dated onboarding plan before you give notice. Collect credentials, licences, backups and documentation from the outgoing provider using a handover checklist. Rotate admin passwords and remove the old provider's access once go-live is confirmed.

How do I find a reliable partner for managed IT solutions?

Shortlist two or three providers that work with businesses of your size, ask each the eight questions above, and compare their answers in writing. Prioritise providers that show measured results and offer fair exit terms. A provider confident in its service has no need to lock you in.

Talk to us about switching

If you're weighing up a move, we're happy to review your current setup and contract and tell you honestly whether switching is worth it. Book a consultation or read more about our managed IT services.