If your business still runs on a server in the office, or files live on individual laptops and a shared drive, you are probably already feeling the limits. Staff work from home, from client sites and on the move, and they need the same files and apps wherever they are.
This guide explains what “moving to the cloud” means for a small business, the signs it is time, where your files, email and apps usually end up, how a migration works step by step, and what to watch out for.
What moving to the cloud means
Moving to the cloud means your email, files and business applications run in a secure data centre managed by a provider such as Microsoft, rather than on hardware in your office. Staff sign in from any approved device, and the provider looks after the hardware, power, cooling and much of the maintenance.
For most UK small businesses that means Microsoft 365: Exchange Online for email, SharePoint and OneDrive for files, and Teams for calls, chat and meetings. Line-of-business applications either move to the supplier’s own cloud version or into a hosted server in Microsoft Azure.
Signs it is time to move
Other common triggers are an office move, a hardware refresh, a new Cyber Essentials requirement from a customer, or simply the cost of keeping old kit running.
What moves where
Not everything has to move at once. Many businesses start with email and files, then tackle applications.
The benefits for a small business
- Work from anywhere, securely, on approved devices.
- No server to replace. You swap a large up-front hardware cost every five to seven years for a predictable monthly licence.
- Better security by default. Microsoft 365 includes multi-factor authentication, conditional access and built-in threat protection, as long as they are switched on and configured properly.
- Real-time collaboration. Several people can edit the same document at once, with version history, instead of emailing copies back and forth.
- Resilience. If the office loses power or broadband, or a laptop is stolen, work carries on from another device.
How a cloud migration works
- Audit what you have: users, devices, email, file shares, applications, and who needs access to what.
- Plan the new structure: decide how SharePoint sites and Teams will be organised, and tidy permissions before anything moves.
- Secure the tenant first: turn on multi-factor authentication, set up conditional access and device management, and configure backup.
- Migrate email and check calendars, shared mailboxes and mobile devices.
- Migrate files to SharePoint and OneDrive, usually out of hours, with a final sync on switch-over day.
- Move or replace applications, working with each software supplier.
- Train staff and support them through the first few weeks.
- Decommission the old server securely, including wiping or destroying the disks.
For a business of 10 to 50 people, email and files typically take a few weeks from audit to switch-over. Applications can take longer, depending on the supplier.
Common mistakes to avoid
- Copying the old mess across. Moving 20 years of folders unchanged into SharePoint just moves the problem. Clean up first.
- Skipping multi-factor authentication. Stolen passwords are the most common way into Microsoft 365. MFA should be on before the first mailbox moves.
- Assuming Microsoft backs up your data. Microsoft keeps the service running, but you are responsible for your data under its shared responsibility model. A separate Microsoft 365 backup protects against deletion, ransomware and leavers.
- Forgetting the broadband. Everything now depends on your internet connection, so check speed and consider a backup line (see our connectivity options).
- Leaving the old server running. An unpatched server left on “just in case” is a security risk. Retire it properly once you have confirmed everything has moved.
Is the cloud secure?
A well-configured Microsoft 365 tenant is usually far more secure than a server in a back office. The key words are “well configured”. The NCSC cloud security guidance sets out 14 principles for choosing and using cloud services safely, and Microsoft 365 is also covered by Cyber Essentials: cloud services you use are in scope, and you are responsible for configuring MFA, user access and security settings.
We set up every tenant we migrate against those requirements. As an NCSC Assured Service Provider (Cyber Advisor for Cyber Essentials) and a Sussex managed IT provider since 1996, we handle the planning, migration and support in-house. Read more about our Microsoft 365 support.
Frequently asked questions
How long does it take to move a small business to the cloud?
For 10 to 50 users, moving email and files to Microsoft 365 usually takes a few weeks from the initial audit to switch-over, with the actual cut-over done out of hours. Line-of-business applications can take longer, depending on the software supplier.
Will we still need a server in the office?
Most small businesses no longer need one once email and files are in Microsoft 365. Some specialist applications still need a server, which can often be hosted in Microsoft Azure instead of in the office.
Is the cloud cheaper than keeping a server?
It changes the costs from a large hardware purchase every few years to a predictable monthly licence. Once you add in server hardware, Windows Server licences, backup, power and maintenance, the cloud is often similar or lower in cost, with better resilience.
Does Microsoft back up our Microsoft 365 data?
Microsoft keeps the service available and has short-term recovery options, but under its shared responsibility model you are responsible for your data. We recommend a separate Microsoft 365 backup to protect against accidental deletion, ransomware and leavers’ data.
Is our data kept in the UK?
Microsoft offers UK data centres, and new UK tenants normally store core Microsoft 365 data in the UK. We check and document data location as part of every migration.
What happens to our old server afterwards?
Once everything is confirmed as moved, the server should be switched off and its disks securely wiped or destroyed. We provide certified IT recycling and secure asset disposal.
Thinking about moving to the cloud?
We will look at your current setup and give you a clear, costed migration plan, including what to move first and what to leave. No obligation.
Sources
- NCSC: Cloud security guidance
- Microsoft: Planning ahead for Windows Server 2016 end of support
- Microsoft Learn: Shared responsibility in the cloud
Do not just read it. Act on it.
Reading is the easy part. Book a free IT review and we will tell you, in plain English, where your business stands and what to fix first.