Choosing an MSP: Swipe Left on These IT Horror Stories

20 Mar

Choosing a Managed Service Provider (MSP) should be straightforward—like picking the right Netflix show. But, too often, it feels more like navigating the murky waters of online dating. Promises are made, profiles look appealing, and everything sounds wonderful—until you're stuck listening to their endless excuses about slow servers, patchy security, and "that one time" they heroically defeated ransomware (spoiler: they probably didn’t).

So, to help you dodge those IT nightmares waiting to happen, here are some screaming red flags indicating you should swipe left—fast!

Red Flag #1: The Bargain Bin Pricing

You see an MSP offering prices cheaper than your daily coffee fix, and you're tempted. But think about it—would you trust your entire business security to someone charging less than a Netflix subscription? Exactly. Cheap MSPs are like budget airlines; you'll end up paying extra for every little thing—like backups, antivirus, or the privilege of having your emails answered in less than a fortnight. Check out this article on why cheap IT support is a false economy.

Red Flag #2: "We Don't Need Cyber Essentials—Trust Us!"

If an MSP says they're "too good" for basic certifications like Cyber Essentials Plus, it's probably because they're about as trustworthy as that Nigerian prince who's desperate to send you £3 million. Certifications exist for a reason. MSPs avoiding them either can't meet the standards or don't want to. Both reasons are terrible, so run.

Red Flag #3: "Sure, We'll Answer Your Call... Eventually."

Customer service is everything. If your potential MSP makes you jump through hoops just to speak to a real human, guess what happens when your server goes down? You’ll be listening to elevator music for eternity, wondering if your backups are as nonexistent as their customer support.

Red Flag #4: "Security? Yeah, We've Heard of It."

If your MSP thinks MFA stands for "Mostly Forgotten Anyway," you're in trouble. MSPs should preach and practice cybersecurity like their lives depend on it—because your business certainly does. If their idea of security is crossing their fingers and hoping for the best, give them a miss.

Red Flag #5: References? What Are Those?

Would you hire a babysitter without checking references? No, you wouldn't, so why trust your IT systems to an MSP that can't produce a single satisfied customer? If they can't proudly point to multiple happy customers, assume those references don't exist—or, worse, exist but are deeply unhappy.

Red Flag #6: Shared Microsoft Tenants—Just Say No!

Shared tenants—sounds harmless enough, right? Wrong! If your MSP is lumping multiple businesses into one shared Microsoft 365 tenant, it's like hosting a sleepover in a one-bedroom flat with total strangers. You wouldn’t let random people into your home, so why let random businesses have even the slightest access to your confidential data?

Let's unpack this disaster: Shared tenants scream "We don't care enough about security to properly isolate your data." One slip-up by another client—maybe a careless click on a phishing email—and suddenly your sensitive information might as well be on a billboard along the M25. Additionally, shared tenants complicate compliance, audits, data retention policies, and privacy concerns. It’s basically the digital equivalent of trying to organise paperwork in a hurricane.

Red Flag #7 - No admin access - Run, just run.

Another major red flag—and clear indication you’re stuck on a shared tenant—is if your MSP refuses to give you global admin access or at least global reader access. Remember, it's YOUR tenant, and you absolutely should have access. A reputable MSP understands this and will even proactively provide you with a "break glass" password, ensuring you have emergency access if needed.

If your MSP insists on using a shared tenant, ask yourself: Do they really have your best interests at heart, or are they just cutting corners to pad their pockets? Spoiler alert: It’s definitely the latter.

Bottom Line: Your Business Deserves Better

Choosing an MSP isn't a decision you should make lightly. Protect your business by demanding transparency, solid security credentials like Cyber Essentials Plus, and an MSP that values your business data as much as you do. Don't settle for bargain-basement services that leave your business vulnerable—because, in the world of MSPs, "cheap" often becomes very expensive.

Swipe wisely.

Noel Bradford

Noel Bradford – Head of Technology at Equate Group, Professional Bullshit Detector, and Full-Time IT Cynic

As Head of Technology at Equate Group, my job description is technically “keeping the lights on,” but in reality, it’s more like “stopping people from setting their own house on fire.” With over 40 years in tech, I’ve seen every IT horror story imaginable—most of them self-inflicted by people who think cybersecurity is just installing antivirus and praying to Saint Norton.

I specialise in cybersecurity for UK businesses, which usually means explaining the difference between ‘MFA’ and ‘WTF’ to directors who still write their passwords on Post-it notes. On Tuesdays, I also help further education colleges navigate Cyber Essentials certification, a process so unnecessarily painful it makes root canal surgery look fun.

My natural habitat? Server rooms held together with zip ties and misplaced optimism, where every cable run is a “temporary fix” from 2012. My mortal enemies? Unmanaged switches, backups that only exist in someone’s imagination, and users who think clicking “Enable Macros” is just fine because it makes the spreadsheet work.

I’m blunt, sarcastic, and genuinely allergic to bullshit. If you want gentle hand-holding and reassuring corporate waffle, you’re in the wrong place. If you want someone who’ll fix your IT, tell you exactly why it broke, and throw in some unsolicited life advice, I’m your man.

Technology isn’t hard. People make it hard. And they make me drink.

https://noelbradford.com