What managed IT support covers in a small nursery
Managed IT support means a provider takes responsibility for your computers, network, email and software, so your staff can focus on the children. For a nursery with a handful of staff, that runs from a broken printer to a locked-out user to a security alert.
The difference between managed support and calling someone when something breaks is timing. A managed provider monitors your systems and fixes small problems before they stop the register or the staff rota. A provider who only appears when something breaks is a clean-up crew, not IT support. Their income depends on your problems, so they have no reason to prevent them. We explain the difference in managed IT vs break-fix.
Not every provider means the same thing by IT support. Before you sign, get a written list of what sits inside the monthly fee and what is charged separately. If a task is not listed with a frequency, assume it is not being done.
Helpdesk, monitoring and day-to-day fixes
Good helpdesk support means a named person or small team answers your calls and already knows your setup. Ask who picks up the phone, whether they can see your systems remotely, and how quickly they respond to urgent problems. Most faults can be fixed remotely, often in minutes.
Monitoring should be automated and should cover your devices, network, suspicious logins and failed backups. "We check manually every morning" is not monitoring. Ask to see the dashboards and the logs. A transparent provider will open them on request.
A helpdesk that only logs tickets and rarely resolves them first time will cost you hours of staff time every week.
Devices, Wi-Fi and Microsoft 365
Your nursery probably runs on a mix of laptops, tablets, a shared office computer and staff phones. Tablets need particular care, and our guide to iPad management for nurseries covers how to control them.
Wi-Fi matters more than most owners expect. Weak coverage in one room can disrupt registers, cameras and online learning journals. Ask any provider whether it surveys your building and manages the network hardware. Replace the router supplied by your internet provider with business-grade equipment, and keep guest devices on a separate network.
Every member of staff needs their own Microsoft 365 account with multi-factor authentication switched on. Shared logins are a security risk, and a good provider will remove them. See two-factor authentication on Microsoft 365 for the steps.
What to check on nursery management software support
Nursery management software holds attendance, billing, parent contact details and learning records. Before you sign, ask whether the provider can troubleshoot your package or only general IT.
Check three things:
- Has the provider supported your software before, or will it work directly with the software vendor?
- How does it handle updates that could affect access?
- Who is responsible for backups of the data inside the system?
Usually the software vendor handles application faults, while the IT provider handles the devices, network and logins that connect to it. Agree that split in writing so nobody waits for someone else to act. Your provider should be able to log a fault with the vendor on your behalf.
Protecting children's records
Nurseries hold sensitive data about children and families: health details, collection arrangements and safeguarding information. Under UK GDPR and the Data Protection Act 2018, your nursery is responsible for keeping it secure. If a breach qualifies for reporting, you must tell the ICO within 72 hours. If you are unsure whether it qualifies, report it anyway.
Your IT provider plays a practical part. It should help you:
- control who can open which records
- encrypt laptops and tablets
- run backups you can restore from
- remove access the day a member of staff leaves (our leavers checklist shows how)
The Information Commissioner's Office publishes data protection guidance for organisations of every size. Read it, and ask how a provider's work supports your obligations. Outsourcing your IT does not outsource your responsibility.
Storing registers or photos on personal phones or unmanaged devices is a common gap. Your IT support should close it with clear device rules. Physical security counts too. Our guide to access control for nurseries covers the building side.
Nursery cyber security
Most incidents start with an ordinary email. A member of staff clicks a link in a convincing message about an invoice or a parent payment, and the account is compromised. Small businesses are targeted because they are easy and connected, not because they are special.
A few basics put a nursery ahead of most:
- multi-factor authentication on email and management software, for the owner too
- a business password manager and unique passwords for every user
- automatic updates on every device
- business-grade endpoint protection on every computer and tablet, not just the office machine
- backups that are separate from your synced files, because syncing is not backing up
Training matters as much as tools. Fifteen minutes a month beats a two-hour session once a year. Make reporting a suspicious email take seconds, and never blame someone who clicks. Our guide to spotting phishing emails is a good place to start with your team.
Ask any provider how it responds to a suspected breach. A clear plan with named contacts and steps to isolate affected devices shortens the damage.
What managed IT support costs
Managed IT support from Octopus 365 starts at £30 per user per month. We publish our prices on the pricing page, and the IT support calculator gives you a figure for your team size.
We offer three support tiers: Workday, Workweek and Always-On. For one or two people there are Solo and Duo packages, each in Base, Plus and Complete.
When you compare quotes, work from the same list:
- A fixed fee per user is easier to budget for than a low base fee with charges added on top. Some providers keep the monthly fee low and make it back in out-of-scope and emergency charges.
- Check that the fee covers monitoring, helpdesk, updates, security tools and on-site visits. Ask what is not included.
- Ask how price rises, setup fees and minimum terms are handled, and get the answers in writing.
The cheapest quote is rarely the cheapest over time. Downtime, breaches and emergency call-outs cost more than a proper monthly fee.
How to read an IT support SLA
A service level agreement (SLA) sets out what your provider promises and how fast. It decides whether you get help when you need it, so read it before you sign. The SLA often sits in a schedule at the back of the contract, which is where vague wording hides.
Start with definitions. A critical incident should mean something specific, such as your nursery management software being unavailable during opening hours, the register or payment system being out of reach, or all staff email being down. Resolution should mean the service works again for staff, not that a ticket has been closed. Response and resolution are different things, and both need a time. Acknowledging a ticket is not responding to it.
Response times should be stated in minutes or hours, in bands: critical faults, routine faults and planned work such as setting up a new starter. Ask what happens outside opening hours, at weekends and during holiday closures. A nursery open from 7am to 7pm needs cover that matches its day. "24/7 support" that turns into best effort after 5pm is not cover.
Look at how availability is measured. Uptime figures mean little unless the SLA says what is monitored, how downtime is calculated and whether planned maintenance is excluded. Ask for a monthly report that arrives without you chasing it.
Check the remedies. A real SLA says what happens when a target is missed: a service credit, escalation or the right to leave after repeated failures. Without a remedy, a target is only a statement of intent.
Finally, check the exit terms. Wording such as best endeavours or reasonable response with no figures gives you nothing to hold anyone to. The contract should also state:
- 30 days' notice, with no auto-renewal trap
- no exit fees after the minimum term
- handover of every admin credential
- that you own your data, documentation, licences and configurations, with free export when you leave
A provider that cannot explain its exit process in plain language is telling you how it will behave when things go wrong.
| Term | What to check | Watch for |
|---|---|---|
| Critical incident | Specific definition, such as management software unavailable during opening hours | Vague wording that leaves the provider to decide |
| Response times | Separate bands for critical, routine and planned work, in minutes or hours | A single figure, or reasonable response |
| Out-of-hours cover | Cover that matches your opening hours | Office-hours contracts and best effort after hours |
| Availability reporting | Monthly, against defined measures and exclusions | Figures you have to request |
| Remedies | Credits, escalation or exit rights after missed targets | Targets with no consequence |
| Exit terms | Notice period, credential handover, data return | An unclear process or exit fees |
What a first IT review should cover
A first review is the fastest way to test whether a provider understands your setting. It should look at your devices, network, email, software, backups and security habits, then produce a short list of priorities you can act on whether or not you sign a contract. Our guide to local IT support for small businesses covers what good support looks like.
Before the review, gather your current contracts, a list of devices and software, and any recent IT problems. Note which issues cost your staff time.
A useful review follows three steps:
- Assess what you have: devices, operating systems, Wi-Fi coverage, email accounts, nursery management software and where data is stored.
- Check the basics that protect children's records: multi-factor authentication, encryption on laptops and tablets, a separate account for each member of staff, and a documented backup routine.
- Produce a short plan that separates what must be fixed now from what can wait until the next budget.
For a small setting with no in-house IT lead, the order matters: protect access first, then data, then reliability. That means multi-factor authentication and removing shared logins before anything else, then encryption and tested backups, then Wi-Fi coverage and device replacement. A provider that leads with a large hardware quote before securing accounts has the order wrong.
Ask for the output in writing, with each recommendation tied to a risk and a cost in pounds. That lets you compare two providers on the same basis rather than on the polish of their presentation.
Once support is in place, keep measuring it. Ask for response and resolution times against the SLA, the number of recurring incidents, and proof that a backup has been restored in a test within the last 30 days, not just taken. If you want a starting point, our free exposure check shows where your accounts and devices stand today.