All insights

What should an advice firm ask before choosing an IT provider?

2 min readBy Brendon Whiting, Founder · 12 May 2026

Three beyond the usual: whether they have supported firms through licensee due diligence, what evidence they routinely produce, and who would own your tenant, your domain and your data. The generic questions matter; these are the ones that separate providers for a licensed business.

Evidence is the distinguishing requirement in this sector. In most businesses a provider is judged on whether things work. In advice you also need to demonstrate to a licensee, an insurer and sometimes a client that specific controls are in place, and a provider who cannot produce a dated report showing multi-factor authentication coverage, patch status and restore tests leaves that work with you, usually during the week you have least time for it.

Then the practical questions that reveal how the relationship will feel. Response arrangements for something urgent and what urgent means in their definition. Who answers and whether they are local. What is included monthly versus billed separately, since project work billed hourly on top of a managed fee is where budgets surprise firms. And what onboarding involves, because a changeover badly timed against a reporting period is unpleasant regardless of who runs it.

Two more that firms skip. Ask for two references from advice practices your size and ring them, because in a market this size that is easy and candid. And ask who owns your tenant, your domain and your data, and whether you would hold administrative access, since the answer determines how difficult leaving would be and a good provider hands it over without hesitation. If you would like to ask us those questions, call 1800 456 567.

Ask us the awkward questions

We support Adelaide advice firms and are happy to be asked about licensee questionnaires, the evidence we produce and who holds your tenant.

Frequently asked questions

Because someone above you will ask for it. In most sectors a provider can be judged on whether things work; in advice, you also need to demonstrate the arrangements to a licensee or an insurer. A provider who cannot produce dated reports creates work for you at exactly the wrong moment.

It helps considerably. A provider who knows Xplan or your licensee's systems well enough to be useful saves the firm from mediating between two suppliers. A provider without that knowledge can still be good, provided they are willing to learn it rather than treating it as somebody else's application.

A fair question and increasingly one your licensee will ask about your suppliers. What access do they hold, how is it protected, what are their own controls, and what happens to your data if the relationship ends. A mature provider answers readily, and the quality of the answer is itself informative.

Questions? Let's talk.

Call 1800 456 567 or fill out the form.

  • 30-minute discovery — no jargon, no pressure
  • Plain-English Essential Eight Cyber Security Scorecard
  • A clear plan tailored to your business

Prefer to talk?

Call 1800 456 567

Powered by Calendly — your data is handled securely.

Our office · Level 2, 25 Grenfell Street, Adelaide

By submitting, you agree to our terms and privacy policy. No spam — ever.