Most businesses put off changing IT provider for far longer than they should. The service may be slow, the communication poor or the bills unpredictable, but the thought of the switch itself feels risky. What if email stops working? What if the old company will not hand over the passwords?
The good news is that a well planned switch is usually uneventful for your staff. The work happens behind the scenes, and most of the risk comes from a handful of predictable issues. This guide walks through them in order, with a checklist you can use whoever you move to.
Step 1: Check your current contract
Before you speak to your existing provider, find your contract and read it carefully. You are looking for:
- The term and renewal date. Many managed IT contracts run for 12 months or longer and renew automatically.
- The notice period and how notice must be given, such as in writing or by email to a specific address.
- Exit or handover terms. Some contracts say what the provider must hand over when you leave, and whether they charge for it.
- Equipment and licence ownership. Firewalls, backup appliances and software licences are sometimes rented or owned by the provider rather than by you.
If anything is unclear, ask a solicitor or your new provider to look at it with you. Knowing your exact leaving date lets you plan the rest of the switch around it.
Step 2: Make sure you own the keys
This is the most important part of any IT handover. Your business should own and control the accounts that everything else depends on. If your current provider set them up in its own name, now is the time to put that right.
Your domain name and DNS
Your domain name, such as yourbusiness.co.uk, is what your website and email addresses rely on. Check who the registered owner is and which company it is registered with. You need a login to that registrar account in your business name. DNS, the system that tells the internet where to deliver your email and find your website, may be hosted somewhere else again, so find out where it is managed and make sure you have access to that too.
Microsoft 365 global admin
Microsoft 365 has a top level administrator role called Global Administrator. Your business should hold at least one Global Administrator account that is not tied to your IT provider, protected with strong multi factor authentication. Microsoft also lets IT providers manage your tenant through partner relationships; your new provider will set up its own access, and the old provider's access should be removed once the handover is complete.
Licences and subscriptions
Find out who you buy Microsoft 365 licences through. If they are bought through your old provider, the licences may need to be moved to a new reseller or bought directly. This needs care, because letting licences lapse can affect access to email and files. Do the same for your security software, backup service and any line of business applications.
Step 3: Gather passwords and documentation
Ask your current provider, politely and in writing, for everything your new provider will need. Most reputable IT companies handle this professionally, and many contracts require it. A typical request covers the following.
- Admin credentials for Microsoft 365 or Google Workspace
- Domain registrar and DNS hosting logins
- Firewall, router and WiFi controller admin access
- Server and network switch admin accounts
- Local admin passwords for computers, or details of how they are managed
- Backup system logins, schedules and where backups are stored
- Licence keys and renewal dates for software and security tools
- Broadband, leased line and phone system account details
- Website hosting and content management logins
- A network diagram, list of devices and any written documentation
- Details of third party suppliers and who to contact at each
Share passwords securely, for example through a password manager, and never in a plain email. Once the switch is complete, every important password should be changed so that only current, authorised people can use them.
Step 4: Plan the handover timeline
Every switch is different, but most follow a similar pattern. The aim is to have the new provider fully onboarded before the old one steps away, so there is never a moment when nobody is responsible.
| Stage | What happens |
| Before giving notice | Review the contract, choose your new provider and agree a leaving date. Your new provider carries out an initial review of your setup. |
| After giving notice | Request credentials and documentation. Confirm ownership of your domain, Microsoft 365 and licences. |
| Onboarding | The new provider installs its monitoring and security tools, checks backups, documents your systems and sets up its helpdesk for your staff. |
| Cut over | Support requests move to the new provider. Old monitoring tools and remote access software are removed, along with the old provider's admin access. |
| After the switch | Passwords are changed, quick wins are addressed and a fuller review sets out longer term improvements. |
Removing the old provider's tools matters. Leftover remote access software and admin accounts are a security risk, even when nobody intends any harm.
Step 5: Tell your team
Your staff need to know who to contact from the cut over date, how to log a support request and what, if anything, will change for them. A short email and a note on the office wall are usually enough. Let them know they might see a new icon or a one off prompt as new security tools are installed, so nobody mistakes it for something suspicious.
Common problems and how to avoid them
- The old provider is slow to hand over. Start the request early, put it in writing and refer to your contract. Most of what you need can also be recovered with your own Global Administrator and registrar access, which is another reason to hold them.
- A domain renewal is missed. Check the renewal date and auto renew settings as soon as you have access.
- Backups stop without anyone noticing. Make sure the new provider confirms backups are running and carries out a test restore early in onboarding.
- Licences lapse. Map every subscription and its renewal date before notice expires.
- Hardware turns out to be rented. Check whether firewalls or backup appliances belong to the old provider, and plan replacements in time.
How Cyber Fits can help
Cyber Fits helps businesses across Sunderland and the North East move to managed IT support with as little disruption as possible. We manage the handover with your current provider, collect and document what is needed and make sure your business holds the keys to its own systems. A free IT review is a sensible first step, as it shows what you have now and what needs to be collected before you give notice.