Selecting a managed service provider in British Columbia: a structured evaluation process

Key takeaways

• Define requirements and must-haves before you meet providers, so the evaluation is driven by your needs rather than the best presentation.
• Use a simple weighted scorecard covering scope, service delivery, security practices, geography, communication and commercial terms.
• BC organizations should ask how a provider handles personal information and where data is stored, and get legal advice on their own obligations.
• Read the agreement for term, renewal, price changes, liability, data ownership and exit assistance before you sign.
• Plan the transition from your current provider carefully; access, documentation and timing matter more than speed.

A six-step selection process

1. 1

   1. Define the requirements

   Document users, devices, locations, critical systems and current pain points. Separate must-haves, such as support for your Microsoft 365 tenant or on-site work at a particular site, from nice-to-haves.

2. 2

   2. Build a shortlist

   Identify three to five providers whose focus matches your size and industry. Ask peers in similar organizations who they use and what they would change, and check whether each provider genuinely serves your locations.

3. 3

   3. Share a consistent brief

   Send each provider the same written brief and invite questions. A provider that asks thoughtful questions about your environment is showing you how they will work.

4. 4

   4. Hold structured meetings

   Use the same agenda for each conversation and include the people who will actually work with the provider, not only leadership.

5. 5

   5. Score written proposals

   Evaluate proposals against your scorecard rather than gut feeling, then discuss the scores as a group to surface concerns.

6. 6

   6. Check references and the contract

   Speak with existing clients of a similar size, ideally ones the provider has onboarded recently, and review the agreement in detail before signing.

A weighted scorecard you can adapt

Assign each category a weight that reflects your priorities, score each provider from one to five, and multiply. The categories matter more than the exact numbers.

• 01

  Scope fit

  Does the proposal cover your users, devices, cloud services and sites explicitly? Are exclusions clear and reasonable for an organization like yours?

• 02

  Service delivery

  How are requests logged, prioritized and escalated? What response targets are committed in writing, and how will you see whether they are met?

• 03

  Security practices

  Which security tasks are included? How does the provider secure its own tools and staff access to your systems? How would it handle a suspected incident?

• 04

  Geography and on-site work

  Can the provider reach each of your sites when physical work is needed, at what cost, and with what lead time?

• 05

  Communication and planning

  Who is your primary contact? How often are reviews held? Is there a roadmap process? Can the provider communicate in the languages your team prefers?

• 06

  Commercial terms

  Total first-year cost, onboarding fees, minimum term, price adjustment clauses, and how out-of-scope work is quoted and approved.

Considerations specific to British Columbia

A consistent agenda for provider meetings

Using the same agenda with every provider makes the conversations comparable and keeps them focused on your needs.

• Ask the provider to summarize your environment and priorities back to you, to test whether they read the brief
• Walk through a recent real problem and ask how they would have handled it, step by step
• Ask who would be your day-to-day contact and who handles escalations
• Ask them to describe their onboarding plan and the first ninety days in practical terms
• Discuss how they would handle each of your locations, including any outside their regular travel area
• Ask what they would want to change in your environment first, and why
• Close by confirming what their written proposal will include and when you will receive it

Contract clauses to read carefully

Have someone with commercial or legal experience review the agreement. These are the clauses that most often cause friction later.

• Term and renewal: initial length, automatic renewal and the notice required to end it
• Price adjustments: whether and how fees can change during the term
• Scope changes: how adding or removing users, devices and sites is priced and when it takes effect
• Service levels: response targets, how they are measured and reported, and what happens when they are missed
• Data and credential ownership: confirmation that documentation, configurations and admin accounts belong to you
• Exit assistance: what the provider will do to hand over to you or a new provider, and at what cost
• Liability and insurance: limits of liability and the provider’s own insurance coverage
• Subcontracting: whether any work is performed by third parties, and where

Switching providers without disruption

1. 1

   Secure your own access first

   Before giving notice, confirm that your organization holds working administrator credentials for Microsoft 365, domain registration, firewalls and key applications.

2. 2

   Time the notice period

   Align the end of the old agreement with the new provider’s onboarding so there is overlap rather than a gap in support.

3. 3

   Request documentation in writing

   Ask the outgoing provider for network diagrams, asset lists, licence records and backup details, referencing the exit terms in your agreement.

4. 4

   Remove old tools and access

   Once the new provider is in place, make sure the previous provider’s remote access agents, accounts and API connections are removed.