How do I know if we should replace our IT provider?
You should consider replacing your IT provider when the same problems keep recurring after you have raised them clearly: missed service levels, repeat outages, weak security practices, untested backups, no documentation, or no help with the decisions your business faces. Before switching, secure your admin credentials, domains, licenses and documentation, and plan an overlap so monitoring and backups never lapse.
Warning signs worth acting on
- The same issues recur and tickets close without root-cause fixes
- Response times regularly miss the contract
- The provider controls admin accounts and you cannot get full access
- Backups exist on paper but nobody can show you a recent restore
- There is no current documentation of your network, systems and vendors
- Security basics such as MFA, patching and logging are inconsistent
- Every request beyond basic support turns into a surprise project invoice
- Your business has grown into compliance or project needs the provider cannot support
Give feedback before you give notice
Some problems are fixable. Put specific concerns in writing, ask for a remediation plan with dates, and review progress after a defined period. If the provider responds well, you avoid a disruptive change. If it does not, you have a documented basis for leaving.
Security and risk are your call
CISA's guidance for MSP customers states that outsourcing IT does not absolve your organization of its risk management responsibilities and that a provider relationship can introduce third-party attack surface. If your provider cannot explain how it protects its own tools and its access to your systems, that is a risk you are carrying.
Microsoft's shared responsibility model is similarly clear that, for cloud services such as Microsoft 365, your company remains responsible for its data, accounts and access management, whoever operates them day to day.
How to switch safely
- Confirm your company owns domains, DNS, Microsoft 365 and other tenants, licenses and vendor accounts
- Obtain and rotate all administrator credentials, and set up an emergency admin account you control
- Collect documentation: network diagrams, asset lists, configurations and vendor contacts
- Verify backups and test a restore before the handover
- Have the incoming provider run an onboarding assessment, overlapping with the outgoing one where possible
- Remove the old provider's remote tools and accounts on a defined date
Choosing the replacement
Use the problems you experienced as your selection criteria. If documentation was the issue, ask candidates to show sample documentation. If security was weak, ask how they protect their own remote tools and admin accounts. If projects were constantly billed as extras, compare scope and exclusions line by line.
Ask for references from companies of similar size and industry, and meet the people who will actually support you. A strong onboarding plan, with an assessment, documented findings and a defined handover from the outgoing provider, is one of the best signs that a provider will run your environment well.
Common follow-up questions
How long does switching IT providers take?
It depends on the size of your environment, the quality of existing documentation and how cooperative the outgoing provider is. Plan for an onboarding period of several weeks, and align the start date with your notice period so there is no gap in coverage.
What if our current provider will not hand over credentials?
Check your contract for handover obligations and escalate in writing. For Microsoft 365, as the tenant owner you can work with Microsoft to recover administrative access. Involve legal counsel if the provider withholds access to systems your company owns.
Should we bring IT in house instead?
Compare the full cost and coverage. One or two internal hires rarely cover help desk, networking, security, cloud and compliance skills, or provide holiday and sick coverage. Many small and mid-size companies get better depth from a fully outsourced provider overseen by an executive.
LAN Service Group provides managed IT for small and mid-size businesses, either as the full outsourced IT department or co-managed alongside an in-house IT team, starting with an onboarding assessment of credentials, documentation, backups and security.
Talk to LAN Service Group (888) 281-7243