To choose the right IT provider for a law firm, score every candidate against six factors: legal-sector experience, security and compliance credentials, a guaranteed SLA, UK-based in-house support, breadth of services, and references from firms like yours. For a 1–250 person firm, the single biggest differentiator is whether a provider understands legal obligations (SRA expectations, confidentiality and Lexcel), not just generic IT. Below is a scoring framework you can use to shortlist and compare providers objectively, plus the questions to ask and the red flags to avoid.
The SCORE Framework for Shortlisting Providers
Rate each provider 1–5 on these five dimensions. The highest total is your shortlist leader, and the exercise forces a like-for-like comparison.
- S for Security & compliance: Cyber Essentials Plus, ISO 27001, and a demonstrable grasp of SRA and data-protection obligations.
- C for Credentials & sector experience: proven law-firm clients and familiarity with legal systems such as Microsoft 365, iManage and NetDocuments.
- O for Operational support: UK-based, in-house helpdesk with published response times, not an offshored queue.
- R for Range of services: IT, cybersecurity, connectivity and telephony from one accountable partner.
- E for Evidence: references, case studies and measurable outcomes from comparable firms.
In-House IT vs. Outsourced Managed IT for a Mid-Size Firm
Firms of 1–250 people often weigh keeping IT in-house against outsourcing. The realistic answer for most is a managed partner, sometimes alongside a small internal contact.
In-house team
Coverage: Limited by team size; holiday and sickness gaps
Cost: Salaries, training, tooling, recruitment
Security depth: Hard to cover every specialism
Managed IT provider
Coverage: 24/7 coverage with no single point of failure
Cost: Predictable monthly fee; tooling included
Security depth: Dedicated security expertise and certifications
Questions to Ask Any Prospective Provider
- Which law firms of our size do you support, and may we speak to them?
- What are your guaranteed response and resolution times, in writing?
- Is your helpdesk in-house and UK-based?
- What security is included as standard, and what is extra?
- Do you hold Cyber Essentials Plus and ISO 27001?
- How do you support compliance with SRA and data-protection requirements?
Red Flags to Avoid
- No written SLA: “best efforts” is not a commitment.
- Security sold only as a pricey add-on, when it should be core for a law firm.
- No legal-sector references: generic IT experience is not the same as understanding a firm.
- Offshored support with no UK escalation, a risk for confidential matters.
Real Client Example
Client: A 200-employee multi-office firm changing IT provider after persistent slow response times.
Challenge: Frequent downtime, no SLA, and a previous supplier with no legal-sector understanding.
Solution: Migrated to a fully-managed service with a guaranteed SLA, UK in-house support and security built in, scoped specifically around the firm’s legal workflows.
Results: Average response time cut to 15 minutes, downtime reduced by 20%, and a successful Cyber Essentials Plus assessment within 6 months.
Why Firms Trust BDR Group
- 32 years in business, supporting UK organisations since 1991.
- 4,000+ customers, from small practices to enterprises including Allianz and Primark.
- In-house support, around the clock, with no offshored helpdesk; an 8-second average call answer time and 6-minute average fault resolution.
- A single accountable partner for IT, cybersecurity, connectivity and communications under one roof.
- Accredited and certified: Cyber Essentials Plus, ISO 27001 and Microsoft partner credentials.
Talk to BDR Group about IT support for your firm
BDR has supported UK organisations since 1991, with an in-house technical team available around the clock. For a no-obligation review of your firm’s IT support, security posture and a tailored quote, get in touch with our team or call us to arrange a conversation.
