Magrathean vs MSP for Microsoft 365 Security. Which one fits your business?
Choosing between a specialist Microsoft 365 security consultant and a managed service provider depends on the nature of the problem. Security control gaps and operational support capacity are different needs — and mixing them is the most common way to buy the wrong thing.
Decision points
If the problem is capacity or daily operational cover, the useful output is a service level and recurring support model. Use this page to decide which type of problem is actually in front of you before starting a conversation with either provider.
Scope
Magrathean: Focused review, remediation and handover for Microsoft 365, Entra ID, Intune, Defender and CE Plus readiness. Typical MSP: Broad ongoing support, user tickets, device support, supplier management and recurring operations.
Buying model
Magrathean: Defined project around a specific control problem. Typical MSP: Retainer or per-user managed service contract.
Best fit
Magrathean: You need risky controls fixed, reviewed or prepared for audit. Typical MSP: You need ongoing helpdesk and day-to-day IT operations.
Handover
Magrathean: Outputs are designed for internal IT or an existing MSP to keep running. Typical MSP: Operational knowledge often stays inside the MSP delivery model.
Who already has a provider
Around half of UK businesses use an external cyber security provider, rising to 70% of medium-sized firms.
- 44%Micro
- 64%Small
- 70%Medium
- 42%Large
How often the supplier is checked
Only 15% of businesses review the cyber risk of their immediate suppliers, so the provider’s own access is rarely looked at.
- 12%Micro
- 22%Small
- 30%Medium
- 48%Large
What the handover should leave
Project work should leave a risk register, approved changes and runbook. MSP work should leave a support model, escalation route and recurring service rhythm. A common example is a company with an MSP already answering user tickets but no one owning Conditional Access exceptions or Defender alerts. That company does not need a second helpdesk first; it needs the risky control set reviewed and handed back with evidence, owners and recurring checks.
Ask yourself first
If you cannot answer these, a second opinion will help.
- 01
Is the urgent problem security posture or everyday ticket volume?
- 02
Who will own Conditional Access, Defender, Intune and evidence after the work finishes?
- 03
Do you need a fixed remediation backlog or a recurring operations contract?
Which one to choose
When to choose: Magrathean
You already have internal IT or an MSP but need specialist Microsoft 365 security depth. You want a control-by-control plan with handover, not another support queue. You need Cyber Essentials Plus readiness or tenant clean-up before a deadline.
When to choose: Typical MSP
You need first-line helpdesk coverage. You need hardware, printer, telecoms or office support. You want one supplier to run ongoing IT operations.
Keep exploring
