MSP Technical Documentation: What Your Provider Should Document
Good documentation is the difference between an MSP that delivers consistent, reliable service and one that relies on individual technicians remembering how things work. When your MSP's best engineer resigns and takes their knowledge with them, the only protection is documentation.
Yet documentation is one of the most neglected aspects of MSP service delivery. Here is what your MSP should be documenting and how to hold them accountable.
Why Documentation Matters
Documentation serves three critical functions:
1. Continuity
When staff change — on either side — documentation ensures the environment can be managed without institutional knowledge. The MSP Employee Retention article discusses how turnover affects service quality. Documentation is the antidote.
2. Efficiency
Documented procedures reduce the time to resolve issues. A technician with a documented runbook resolves problems faster than one who has to figure it out from scratch.
3. Accountability
Documentation creates a record of what was done, when, and why. This is critical for compliance, audits, and dispute resolution.
Essential Documentation Your MSP Should Maintain
1. Network Documentation
| Document | Content | Update Frequency |
|---|---|---|
| Network topology diagram | All network devices, connections, IP addresses, VLANs | After any network change |
| Firewall configuration | Rules, NAT, VPN, ACLs, credentials | After any firewall change |
| DNS records | All internal and external DNS entries | After any domain change |
| DHCP scopes | IP ranges, reservations, exclusions | After any IP management change |
| Wireless configuration | SSIDs, passwords, VLAN mappings, access points | After any wireless change |
2. Asset Inventory
| Document | Content | Update Frequency |
|---|---|---|
| Server inventory | Make, model, OS, specifications, location, role | Quarterly |
| Workstation inventory | Make, model, OS, serial number, user assignment | Quarterly |
| Software licence register | Product, licence key, expiry, count, compliance status | Quarterly |
| Hardware warranty register | Device, warranty provider, expiry date, coverage type | Quarterly |
| Cloud service inventory | Service, subscription, cost, admin contact, renewal date | Monthly |
3. Configuration Documentation
| Document | Content | Update Frequency |
|---|---|---|
| Server configurations | OS settings, roles, installed software, scheduled tasks | After changes |
| Application configurations | Line-of-business app settings, database connections | After changes |
| M365 tenant configuration | Entra ID settings, Conditional Access policies, Teams governance | After changes |
| Backup configuration | Backup schedules, retention policies, storage locations | After changes |
| Monitoring configuration | Alert thresholds, escalation paths, notification contacts | After changes |
4. Runbooks and SOPs
Runbooks are step-by-step procedures for common tasks. Every MSP should maintain runbooks for:
- New user onboarding: Create account, set up M365 licence, configure device, grant access
- User offboarding: Disable account, revoke access, archive data, reclaim equipment
- Server reboot procedure: Pre-checks, reboot sequence, post-reboot validation
- Backup restoration: Restore process, validation steps, communication plan
- New workstation deployment: Imaging, software installation, user configuration
- Firewall change request: Approval process, implementation steps, rollback procedure
- Security incident response: Detection, containment, eradication, recovery steps
- Disaster recovery activation: Step-by-step DR invocation process
5. Vendor and Contact Documentation
| Document | Content | Update Frequency |
|---|---|---|
| Vendor contacts | ISP, Microsoft, hardware vendors, software suppliers | Quarterly |
| Escalation procedures | Internal and vendor escalation paths | Quarterly |
| Emergency contacts | Key client contacts, after-hours contacts | Quarterly |
| MSP team contacts | Account manager, technical lead, escalation contacts | Quarterly |
6. Security Documentation
| Document | Content | Update Frequency |
|---|---|---|
| Access control matrix | Who has access to what systems and why | Monthly |
| Security policies | Acceptable use, password policy, data handling | Annually |
| Incident response plan | Detection, containment, eradication, recovery, lessons learned | Annually |
| Essential 8 compliance evidence | Maturity assessment, gap analysis, remediation plan | Quarterly |
| Penetration test results | Findings, remediation status, residual risk | Annually |
Documentation Standards
Documentation is only useful if it is accurate, current, and accessible. Your MSP should follow these standards:
Accuracy
- Document the actual state, not the intended state
- Verify documentation against the live environment quarterly
- Note exceptions and workarounds explicitly
- Include version history and last-reviewed dates
Accessibility
- Store documentation in a centralised, searchable location
- Provide client access to key documents (network diagrams, asset inventory)
- Use consistent formatting and terminology
- Include a table of contents or index
Maintenance
- Update documentation whenever changes are made
- Conduct quarterly documentation audits
- Assign documentation ownership to specific team members
- Include documentation quality as a KPI
How to Hold Your MSP Accountable
1. Include Documentation Requirements in Your Contract
Your MSA should specify: - What documentation the MSP must maintain - The format and storage location - Update frequency and review schedule - Your right to access documentation at any time - Documentation handover requirements upon termination
The MSP Contract Checklist includes documentation as a key contract element.
2. Request Documentation During QBRs
At every Quarterly Business Review, ask for: - Updated network diagrams - Current asset inventory - Recent runbooks for critical procedures - Documentation audit results
3. Verify Documentation Against Reality
Periodically cross-check documentation against the actual environment. If the network diagram does not match the live network, the documentation is not being maintained.
4. Ask for Documentation During Incidents
When your MSP resolves an incident, ask them to document the root cause and the fix in the knowledge base. This builds institutional knowledge over time.
The Documentation Handback
If you ever change MSPs, you need your documentation returned. This is why pre-agreed documentation requirements are critical.
Your exit documentation request should include: - Complete network documentation - Asset inventory - All runbooks and SOPs - Configuration exports for all systems - Vendor contacts and support agreements - Security policies and compliance evidence - Backup and DR documentation
See the MSP Contract Termination Process for managing the documentation handover.
Related Guides
- MSP Onboarding Checklist — What to set up during onboarding
- MSP Contract Checklist — Documentation requirements for contracts
- MSP Technical Debt — How poor documentation contributes to tech debt
- MSP Health Score — Benchmark your MSP's operational maturity
- MSP Contract Termination Process — Documentation handover on exit
Was this helpful?