A better handover
starts with clarity
A handover is more than passing on a password. Identify the accounts, equipment and records your company controls, then agree access, checks and follow-up. You can enquire even when some records are missing.
Changing a provider is a business decision
Start by identifying what your current provider manages, what is unclear and what your business needs to improve. A checklist helps the conversation; it is not a security assessment.
- Prepare for a renewal or compare service proposals.
- Keep useful existing arrangements while clarifying responsibilities.
- Identify what is missing before agreeing timing and a handover.
01Accounts and administrative access
Prepare system names, owners and access status. Do not provide passwords or verification codes.
Accounts and administrative access
Prepare system names, owners and access status. Do not provide passwords or verification codes.
List business email, domain, cloud, firewall and backup administrators. Identify the company’s approver, recovery contacts and supplier access.
02Equipment, licences and renewal dates
Mark missing information as “to be confirmed”. You do not need to decide on replacements or termination first.
Equipment, licences and renewal dates
Mark missing information as “to be confirmed”. You do not need to decide on replacements or termination first.
List equipment, software licences, internet connections and service owners, renewal dates and support status. Check existing contracts for rental, renewal or termination terms.
03Important data and recovery
Gather backup scope, review records and any available restoration-test results.
Important data and recovery
Gather backup scope, review records and any available restoration-test results.
Identify systems to restore first, who manages backups and the evidence from the latest successful restoration test. A backup-complete message alone does not establish recovery capability.
04Configuration records and open issues
Start with whether documents exist, who holds them and a brief outline of outstanding issues.
Configuration records and open issues
Start with whether documents exist, who holds them and a brief outline of outstanding issues.
Locate network, remote access and system documentation. List known issues, exceptions and work already in progress. Agree a secure channel for detailed configuration later.
05Business hours and supplier dependencies
List important systems, operating constraints and known contact roles.
Business hours and supplier dependencies
List important systems, operating constraints and known contact roles.
Explain critical operations, possible maintenance windows and any ERP, accounting, clinic or production suppliers that must be involved.
06Acceptance and access review
Identify who signs off the work and which results are still awaiting verification.
Acceptance and access review
Identify who signs off the work and which results are still awaiting verification.
Before a change, agree checks, a rollback plan and responsible people. After the handover, verify services and records, review unnecessary access through an approved process and retain an open-items list.
Handover timing, disruption and scope depend on existing systems, authority, documentation and supplier cooperation. This checklist does not guarantee uninterrupted operations or complete security.
A few useful questions
Must we cancel our current provider first?
No. First identify the work you want to retain, coordinate or transfer. Any notice, termination or equipment return follows your existing contract. Plan responsibilities before changing access.
Can we retain our current equipment?
Review support status, compatibility, configuration and risks first. Separate equipment to retain, adjust or replace; confirm any purchases and licence costs before deciding.
Our supplier holds the administrator accounts. Where do we start?
List system names, the company’s authorised decision-maker and known access arrangements. Use the appropriate contractual and authorised route to obtain access. Never send passwords or recovery codes in this enquiry form.
Some records are missing. Should we wait?
You can start with what is known. Identify missing documents and who may hold them; do not treat an unknown item as verified. Scope and timing depend on the evidence and access available.
Public guidance and further reading
These independent educational resources support general preparation. They do not imply a partnership, accreditation or endorsement of GDMME. Check the original guidance for its scope and publication date.
Discuss the part you want to improve
Company size, your main systems and a short outline are enough to begin. Do not submit passwords, detailed configuration or personal-data files.