How to choose the best managed services provider

Start with what you actually need, not a generic checklist

Write down your device count, user count, sites, any regulatory requirements (FCA, Cyber Essentials, GDPR-sensitive data) and your biggest current pain point, whether that is slow response, security exposure or a lack of strategic input. This becomes your scoring baseline rather than comparing providers against each other's marketing.

A five-category scoring framework

• Response and resolution: published SLA times by severity, and evidence (not just claims) of what they actually achieve
• Security depth: is EDR/MDR, email security and Cyber Essentials support included or bolted on, and is it monitored 24/7 or just installed
• Proactivity: do they show you patch compliance and backup success reporting without being asked
• Fit and communication: is there a named account manager, and do technical staff explain issues in plain language
• Commercial terms: contract length, exit terms, price per user against what is actually included

Questions that separate strong providers from weak ones

• What is your average first response time and average resolution time, by ticket severity, over the last quarter?
• How do you monitor for security incidents outside office hours, and who actually responds?
• What happens to our data and access if we leave, and how much notice do we need to give?
• Can you provide two references from businesses of a similar size in a similar sector?
• How do you handle a major incident, such as ransomware, step by step?

Red flags worth walking away from

• Vague or unwilling answers on response time data
• No mention of security monitoring beyond antivirus
• Long minimum contract terms with unclear exit provisions
• No account management beyond the support desk
• Reluctance to provide references or a trial period

Weighting the score to your business

Not every category matters equally. A regulated finance firm should weight security and compliance heavily; a small retailer might weight response time and cost more. Multiply each category score by a weighting that reflects your priorities, total the results, and use that to shortlist rather than choosing on price or a single sales pitch.

What a good onboarding looks like once you decide

• A structured audit of your current estate within the first two to four weeks
• A documented remediation plan for anything found to be out of policy
• A clear, written SLA and escalation path before go-live, not after
• A defined transition plan away from your previous provider that minimises disruption