Many business owners put up with an IT provider they are unhappy with for longer than they should. The reason is rarely loyalty. It is the worry that changing provider will cause chaos: lost emails, locked-out staff, a week of missed work and a team that stops trusting IT altogether.
That worry is reasonable, but most of the disruption is avoidable. A change of provider goes wrong when the handover is treated as a single day's job. It goes well when the business knows what it owns, what its current provider controls, and what the new provider needs in order to take over safely.
This guide covers the areas to plan, in the order most businesses find useful.
Why the handover matters more than the switch
Your IT supports almost everything your team does: email, files, phone calls, line-of-business software, printing, access to customer systems and the devices people use all day. When responsibility for those systems moves from one provider to another, the main risk is not the new provider's skill. The risk is that something important is known only to the old provider, and nobody thought to ask for it.
If you have already read our articles on the signs that your IT provider is letting you down or the signs your business has outgrown its IT support, you may already be considering a change. The steps below apply whether the move is driven by poor service, a growing team or an approaching contract renewal.
Start by listing what your provider actually controls
Before you contact a new provider, write down what your current provider looks after. Most businesses find the list is longer than expected. It usually includes:
- Email and Microsoft 365 administration
- Servers, cloud services and backups
- Firewalls, routers and internet connections
- Laptops, desktops and mobile devices
- Security software and monitoring tools
- Phone systems and call routing
- Printers, scanners and shared equipment
- Line-of-business applications, and any licences tied to them
For each item, note whether the business holds its own copy of the details, and whether a named person in your team knows about it. Gaps in this list are where handovers usually stumble.
Administrator access: don't depend on one person or one supplier
This is one of the most important parts of any handover. If one individual or one supplier is the only route into your systems, you do not really control your IT.
Your business should have resilient, documented access to the privileged accounts that run its systems. In practice, that means:
- Administrative control sits with the business, not with a single engineer.
- At least one director knows where administrative access is held and how it is recovered if someone leaves or is unavailable.
- Important logins are recorded securely, with access that is controlled and reviewed.
- Shared or service accounts, such as those used for scanners or business software, are documented.
Ask your current provider for a clear written record of the administrative accounts that matter to your business and where they are held. The exact arrangement will vary depending on your systems, but the principle is the same: the business should be able to continue operating, and to appoint a new provider, without needing anything from the old one beyond a professional handover.
Passwords should be held in a business-controlled password manager, not in a spreadsheet on someone's desktop or in an email thread. If your business cannot currently access its own credentials, resolve that before the change, not after.
What your outgoing provider should hand over
A professional outgoing provider should supply or transfer everything the business needs to continue, including:
- Customer-owned credentials and administrative access needed to run the systems
- Current documentation, network details and configuration records
- Your business data, and confirmation of where it is held
- Software licences and the details needed to move or renew them
- Any information needed to close down or transfer services cleanly
You may find some tools and platforms are managed through the provider's own systems, licences or security products. That is common and can be legitimate. What matters is that the arrangement is clearly documented, that the business knows what is being used on its behalf, and that nothing the business owns is held hostage when the relationship ends.
Microsoft 365: keep control of your tenant
For most businesses, Microsoft 365 is now the centre of daily work. Email, files, Teams calls and shared calendars all depend on it, so it needs careful handling during a handover.
Your business should retain control of its Microsoft 365 tenant, its domains and appropriate administrative access. This is the account that holds your users, licences and data, so it matters who can change it.
Where a provider has set up or manages Microsoft 365 for you, the relationship should be clearly documented. That includes any partner or licensing arrangement, which provider manages which licences, and how billing is handled. Confirm the following:
- The business knows which email domains are registered to it and who has access to the domain records.
- Multi-factor authentication (MFA) is enabled for all appropriate user and administrator accounts.
- At least one authorised person at your business can see and approve licence and billing changes.
- Backup and retention settings are documented.
- Any third-party apps connected to the tenant are listed.
If you want more detail on what a managed service should cover here, our Microsoft 365 services page explains the typical responsibilities.
Documentation: the handover pack
A good handover depends on documentation. You do not need a folder of technical manuals. You need a clear, current record of how your IT works, written so that a new provider can start without guessing.
Ask for, or prepare:
- A simple network overview showing the main equipment and internet connections
- A list of users, devices and the locations they work from
- A list of key software and its renewal dates
- Details of your backup arrangements, and when a restore was last tested
- Your support process, including how staff raise issues and who approves changes
- Any ongoing projects, open issues or planned work
If your current provider cannot supply this, the new provider will need to rebuild it. That takes time and may delay the start date, so it is worth knowing before you agree a timetable.
Suppliers, domains and third-party systems
Many handover problems come from things nobody thinks of as IT. Check who controls:
- Your domain name registration and DNS records, which affect email delivery and website hosting
- Your internet supplier, including the account number and contract details
- Your telephone line providers and any hosted phone system
- Software vendors who need to approve changes or licence transfers
- Printer and copier leases
A domain registered to an old provider's account can cause serious email problems if it is not handled carefully. Confirm the registrar, the account holder and the renewal date, and make sure the business is the named owner.
Security tools and devices
Security needs care during a handover, because the aim is to avoid any unnecessary gap in protection.
Before the change, confirm:
- Which security tools are installed on each device, and who manages them
- How laptops are encrypted and where recovery information is stored
- Whether devices are enrolled in a management platform, and who controls it
- How leavers' access is removed, and how quickly it happens
Removing old security tools and deploying replacement protection should be coordinated, so that devices are not left without adequate protection for longer than necessary. The sequence depends on your environment, so it should be planned with both providers rather than left to chance on the day.
Devices also need an inventory. Know which laptops, desktops and phones belong to the business, which are leased, and which are personal devices used for work. Asset ownership is easy to overlook until a device needs replacing.
Planning the timing
Pick a date that avoids your busiest weeks. A month-end close, a product launch or a seasonal peak in your sector is a poor time to change systems. A quieter period gives the new provider room to work without interrupting staff.
A staged approach usually works best:
- Confirm access, documentation and data arrangements before notice is given.
- Agree the sequence for moving accounts, devices and services.
- Move devices, accounts and services in small groups.
- Confirm that everything works before the old provider's access ends.
- Keep the old provider available for questions for a short period.
Check your contract's notice period early. Clear dates for the end of the old arrangement and the start of the new one make the whole process easier to manage.
Telling your staff
Your team will notice the change, even if it is handled well. The aim is to make sure they know what is happening and what they need to do, not to explain the technical detail.
Let staff know:
- The date the change takes effect, and whether anything will be unavailable during the switch
- Who to contact with questions, and how to raise an issue
- Whether they will need to reset passwords or re-enrol devices
- What, if anything, will look different on day one
A short, practical email from a director usually works well. Staff are far less worried by a planned change than by an unexplained one.
What a good new provider should do in the first 30 days
Once the handover is complete, the first month shows whether the new relationship is working. A good provider will:
- Review your documentation and fill any gaps it finds
- Confirm that backups are running and that a restore has been tested
- Check security settings, including MFA and administrative access
- Agree a clear way for your staff to raise issues
- Explain how they will report on the service and how changes are approved
- Set up regular reviews so the arrangement does not drift
If a provider struggles to answer basic questions about your systems during the sales process, that is a useful signal about how the handover will go.
Next step
If you are thinking about changing provider, start by understanding what your current arrangement covers and where the gaps are. Our free IT and cyber security review looks at your current setup, including access, documentation, Microsoft 365 and backups, so you know what to ask for before any decision is made. If you want to talk it through, you can also learn more about our Managed IT Support for businesses across Lancashire, Greater Manchester and the wider North West.