Here’s a quick-and-friendly take inspired by the latest from the National Cyber Security Centre (NCSC) on choosing the right managed-service provider (MSP):

Choosing a good MSP means picking someone you trust to treat your systems the way you would — with security, transparency and care. A solid MSP should use two-step verification, clean audit logs, and limit privileges so they only access what’s needed. NCSC
You want a partner who’s proactive: spotting potential issues before they happen, keeping systems patched, and responding fast. Their expertise should bring you peace of mind, not extra stress.
Ultimately, the right MSP becomes more like an extension of your team — secure, dependable, and always looking out for your business.

The NCSC point you to Microsoft’s best practice guide, which can work through and implement, additional to Microsfts guide I would recommending backing up 365 – some of these recommended settings are not available until additional licences are purchased