Choosing an IT support provider in London is not simply about finding someone who can fix a laptop or reset a password. Your provider will influence your security, productivity, costs and ability to grow.
The wrong choice can leave you facing:
- Unplanned service disruption
- Slow response times
- Unclear monthly bills
- Weak cyber security
- Failed backups
- Technology that cannot scale with your business
The right partner, however, can fortify your systems, reduce daily stress and pave the way for long-term IT Greatness.
With cyber threats becoming more sophisticated and hybrid working now standard, moving from legacy, reactive support to proactive managed IT services is an essential transition. Here are seven questions to ask before you sign.
Are you choosing break-fix support or proactive managed IT services?
Before comparing providers, you need to understand the model they offer.
What is it?
Break-fix IT support is a reactive arrangement. You contact a technician when something goes wrong, then pay for the time or parts required to resolve the issue.
This may appear affordable at first, but costs can quickly become unpredictable. More importantly, the provider may not be monitoring your systems or preventing problems before they affect your team.
Managed IT services take a proactive approach. You pay an agreed monthly fee for ongoing monitoring, support, maintenance, security and strategic guidance.
How it works
A proactive provider typically:
- Monitors devices, networks and cloud systems for warning signs.
- Applies security patches and updates.
- Investigates alerts before they become major incidents.
- Provides a helpdesk with defined response times.
- Reviews your technology and recommends improvements.
- Helps align IT with your business goals.
For most modern businesses, the proactive model offers greater control and fewer unpleasant surprises. The question is not simply, “How quickly can you fix a problem?” It is also, “How effectively do you prevent that problem from happening?”
1. What is actually included in the monthly fee?
Never compare providers on price alone. Compare the scope of service behind the price.
Ask each prospective provider for a written list of inclusions and exclusions. This should clarify whether the monthly fee covers:
- Unlimited helpdesk support or a limited number of hours
- Remote and on-site support
- Microsoft 365 administration
- User onboarding and offboarding
- Device monitoring
- Patch management
- Cyber security tools
- Backup monitoring
- Strategic reviews
- Out-of-hours support
- Projects, upgrades and migrations
Also ask what is charged separately. Some providers advertise a low monthly price but add fees for every site visit, new user, security tool or piece of project work.
A clear scope protects you from increased costs and makes it easier to compare like-for-like proposals.
2. What response times are guaranteed in writing?
A friendly promise is not the same as a contractual commitment.
Ask to see the provider’s SLA, or Service Level Agreement, and check whether it clearly defines:
- What counts as a critical, high or standard incident
- The guaranteed response time for each priority
- Support hours
- Out-of-hours escalation
- Target resolution times
- How missed targets are handled
- Who takes ownership of serious incidents
For example, a complete loss of access to your core systems should not be treated in the same way as a request to install software on one device.
Ask the provider to show its real performance data, not just its targets. Useful measures include:
- Average first response time
- Average resolution time
- MTTR, Mean Time to Resolve
- First-contact resolution rate
- Number of SLA breaches
- Recurring incidents
Red flag: If a provider will not put response commitments in writing, you may be signing up for an undefined queue rather than a reliable service.
3. How are monitoring and patching handled?
Proactive IT support should uncover problems before your employees do.
Ask:
- What systems are monitored?
- Are laptops, servers, network devices and cloud services included?
- Is monitoring continuous or performed periodically?
- Who investigates alerts?
- How are critical vulnerabilities prioritised?
- How quickly are emergency patches applied?
- Are updates tested before deployment?
- What happens if an update causes a problem?
- Will you receive patch compliance reports?
Monitoring should not mean simply collecting alerts and ignoring them. Your provider should have a documented process for reviewing, prioritising and resolving issues.
Patch management is equally important. Out-of-date software and misconfigured systems can create opportunities for attackers. A strong provider should be able to explain its routine patch schedule as well as its process for urgent zero-day vulnerabilities.
4. What happens during onboarding?
Switching IT providers can feel daunting, but a professional onboarding process should simplify the transition rather than create disruption.
Ask for a clear onboarding plan covering:
- Initial discovery and audit
- Review of your current risks
- Collection of documentation and administrative access
- Deployment of monitoring and security tools
- Review of Microsoft 365 and user permissions
- Backup verification
- Employee communication
- Handover from your existing provider
- Completion milestones and success measures
The provider should also explain how it will document your environment. Accurate documentation helps engineers resolve issues faster and reduces dependence on one individual’s memory.
Ask who owns your data, configurations, licences and documentation. You should retain access to the information needed to operate your business, including when the relationship eventually ends.
Red flag: Be cautious if the provider cannot explain its first 30, 60 or 90 days with you.
5. How are cyber security and backup covered?
Basic antivirus alone is not a complete cyber security strategy.
The UK’s National Cyber Security Centre advises that one in two small businesses experiences a cyber incident every year. Its small organisations cyber security guide highlights the importance of protecting devices, accounts and backups.
Ask prospective providers whether their service includes:
- MFA: Multi-Factor Authentication
- Endpoint detection and response
- Email security
- Secure Microsoft 365 configuration
- Vulnerability assessments
- Dark web monitoring
- Security awareness training
- 24/7 SOC monitoring
- Incident response planning
- Regular security reporting
You should also ask what happens when a threat is detected. Does the provider simply send you an alert, or can its security team investigate, contain and respond?
Backup requires the same level of scrutiny. Ask:
- What data is backed up?
- Are Microsoft 365 emails, OneDrive, SharePoint and Teams included?
- How frequently are backups taken?
- Where are copies stored?
- Are backups protected from ransomware?
- How often is a full restore tested?
- What are the RPO and RTO?
- Who is responsible for recovery during an incident?
A backup that has never been tested is an assumption, not a business continuity plan. You can also review Stevens I.T. Solutions’ vulnerability assessment guidance for more context on uncovering hidden risks.
6. Will the pricing scale as your business grows?
Your IT provider should support growth, not penalise it.
Ask how pricing changes when you:
- Add employees
- Open a new office
- Introduce remote workers
- Increase the number of devices
- Add mobile users
- Adopt new cloud applications
- Need project or strategic support
Look for transparent per-user or per-device pricing, with a clear explanation of what happens when your requirements change.
At Stevens I.T. Solutions, plans start from £39 per user per month, with support designed for organisations ranging from sole traders to businesses with up to 500 employees. That flexibility means your provider can remain suitable as your needs evolve.
Also check the contract length, notice period, annual price increases, renewal terms and exit process. A modern provider should earn your loyalty through results rather than relying on a difficult lock-in.
7. Who actually answers the phone?
Technology is important, but the support experience is just as valuable.
Ask whether you will speak to:
- A named support team
- An outsourced call centre
- A rotating group of engineers
- A dedicated account manager
- An escalation manager during major incidents
Find out how support requests are raised and tracked. Can employees call, email or use a portal? Will they receive regular updates? Can you speak to a human when the issue is urgent?
Ask for customer references or case studies from businesses of a similar size and complexity. A provider that supports a one-person business may not have the capacity for a 100-user organisation, while a large national provider may not offer the personal service your business needs.
What red flags should you avoid?
Be cautious if you encounter any of the following:
- No written SLA
- Vague descriptions of what is included
- A price that excludes essential security tools
- No evidence of monitoring or patching
- No regular service reporting
- No tested backup and recovery process
- No clear onboarding plan
- Unexplained project or on-site charges
- Difficulty speaking to a real person
- Pressure to sign a long contract immediately
These warning signs do not always mean a provider is unsuitable, but they do mean you should ask harder questions before committing.
How can you compare IT providers fairly?
Create one requirements document and send the same questions to every provider. Ask each one to return:
- A detailed service scope
- SLA response commitments
- Security and backup information
- Onboarding timeline
- Pricing model
- Contract terms
- Sample monthly report
- Customer references
Then score each provider against the same criteria rather than choosing the most impressive presentation.
A simple IT support scorecard
Score each category from 1 to 5:
| Category | Score |
|---|---|
| Clear monthly inclusions and exclusions | /5 |
| Written SLA and response times | /5 |
| Proactive monitoring and patching | /5 |
| Cyber security coverage | /5 |
| Backup and disaster recovery | /5 |
| Onboarding and documentation | /5 |
| Scalability and pricing transparency | /5 |
| Access to real people and expertise | /5 |
| Reporting and strategic reviews | /5 |
| Contract flexibility | /5 |
| Total | /50 |
Do not automatically choose the provider with the highest score. Use the results to identify where each provider is strong, where risks remain and which questions need further clarification.
Ready to choose with confidence?
The best IT support London provider should do more than respond when something breaks. It should help you operate securely, improve productivity and make confident technology decisions.
At Stevens I.T. Solutions, we support businesses from sole traders to organisations with up to 500 employees, with managed IT services starting from £39 per user per month. From proactive monitoring and Microsoft 365 management to cyber security, backup and strategic guidance, we make complex technology simple and stress-free.
Discover our managed IT services or contact Stevens I.T. Solutions to start the conversation with ease.
.png)



