Bring user support, routine upkeep and IT planning together, with a clear division of work between Proxar, your team and other suppliers.
Proxar · UK expertise
Does your MSP take security seriously?
A list of security products is not the same as an explanation of how your business is protected. Ask your provider to connect the work it does to named responsibilities and evidence you can understand.
Start with the agreement. Some tasks may belong to your own team or another supplier, and a fair review needs to recognise that division.
Technology partnerships
Technology partners you know
We help you choose and look after the technology your team uses every day.
Who can administer your systems, and who checks that access?
Ask how administrative permission is authorised, reviewed and removed when roles change. You need an explanation of the process and appropriate evidence, not a spreadsheet of passwords.
A supplier engineer who has left should not retain unexplained access. Ask how the provider tracks its staff and delegated accounts, how removal is checked and who in your business can raise a concern. Any sensitive evidence should be reviewed through an appropriate channel.
Pick one finding and follow it through
Choose a representative security or maintenance issue rather than ask only for a total number of alerts. How was it found? Who decided its priority? Who owned the fix, and what approval or supplier work was needed?
Then ask how completion was checked. If the action remains open, establish why, who accepted the position and when it will be reviewed. That conversation reveals more about follow-through than a report in which every issue has a colour but no next action.
Business owner reviewing security questions with an MSP adviser · Illustrative image
Ask the same practical questions about recovery and incidents
A successful backup notification does not establish that every required business service can be restored. Review who investigates backup failures, which recovery tests are included and who verifies the application after restoration.
For security incidents, ask who receives alerts, when a person investigates and who can approve containment. Recovery, communications and specialist assistance may have different owners. Understanding those routes before an incident is more useful than discovering them while people are waiting for access.
Missing evidence is a question to resolve, not automatic proof that a provider has behaved improperly. Use the MSP assessment guide to turn the findings into a practical improvement discussion, including work your business or other suppliers need to own.
Client experience
What our clients say
“I’ve worked with Proxar for a number of years and have always found them to be honest, knowledgeable and informative.”
Before you decide
Your questions, answered
Should our provider send passwords or raw logs as proof?
Not as a routine measure of service quality. Agree a suitable summary or controlled evidence review that answers the question without exposing unnecessary information. The goal is to understand the work and its outcome, not to create another uncontrolled copy of sensitive access details or security records.
Does a missing report mean our provider is doing nothing?
No. It means the evidence or reporting arrangement needs clarification. Start with the responsibilities and outputs in the agreement, then ask how the work can be demonstrated appropriately. Keep a missing answer distinct from a confirmed failure to carry out an agreed task.
Does continuous monitoring mean someone responds at any hour?
Not necessarily. Automated checks, human investigation and incident response are different commitments. Ask for the actual coverage hours, the escalation route and the actions the responding team is authorised to take. Do not infer those promises solely from a product licence or a dashboard that operates continuously.
What should we do with the answers from the review?
Record what is clear, what needs evidence and which actions require a decision. Assign owners across your provider, your own team and other suppliers where relevant. The useful outcome is an agreed improvement discussion, not an unexplained score or an assumption that every responsibility belongs with the MSP.
Your next step
Still unclear who owns an important security task?
Bring the relevant service terms and the questions that remain unanswered. We will help you work through the responsibilities and evidence needed for a constructive review, without assuming that every gap calls for a change of provider.