Cloud Managed Services in Hong Kong: What's Included, Pricing Models & How to Choose (2026)
A buyer's explainer for Hong Kong firms of 50 to 300 staff comparing cloud managed service providers: what is included across Microsoft 365, Azure, AWS, backup and security, the three pricing models (per user, per resource, retainer), published Hong Kong prices, and the questions that separate good providers from the rest.
The short answer: A cloud managed service in Hong Kong is an outsourced team that runs the cloud estate you already have: Microsoft 365, Azure or AWS workloads, backup, identity and security, under an SLA. It is not hosting. Providers price it three ways: per user (most common for Microsoft 365-centred firms), per resource (per server, per device, per VM), or as a retainer of hours. Brocent's published Hong Kong managed IT plans start from HK$855.14 per user per month at list price, with servers and backup priced per resource. Compare providers on scope, the SLA, who owns the credentials, and how you leave.
This article is for the IT manager or operations manager of a Hong Kong company with 50 to 300 staff who is comparing cloud managed service providers, or "cloud-based managed service providers", and wants to know what should be included, how the price is built, and how to choose. Brocent figures are taken from its published pricing data as of 31 October 2026. No other provider is named or priced.
What is a cloud managed service, and what is it not?
A cloud managed service is a managed IT service whose scope is the company's cloud estate. The provider takes responsibility for configuring, monitoring, securing, backing up and supporting cloud services the company already subscribes to, and for the users and devices that depend on them.
It is easy to confuse with three other things:
- Cloud hosting. A provider runs servers or applications on its own or a public cloud platform for you. Hosting answers "where does this run?"; a managed service answers "who keeps it running, secure and supported?". Many firms need both, but they are priced and contracted separately.
- A one-off migration. Moving email to Microsoft 365 or file shares to SharePoint is a project with an end date. A managed service is what happens every day after go-live.
- Licence resale. Buying Microsoft 365 or Azure through a partner is procurement. It includes no monitoring, no hardening and no help desk unless the contract says so.
For most Hong Kong firms of 50 to 300 staff, the cloud estate looks similar: Microsoft 365 for email, files and Teams; Entra ID for identity; Intune for laptops and phones; a handful of servers or VMs in Azure or AWS; a backup service; and some line-of-business SaaS. A cloud managed service should cover all of that as one estate, with one SLA.
What should a cloud managed service include?
Use this as a checklist. Brocent's managed IT cloud services cover each area, and the scope below is the minimum to expect from any provider.
Microsoft 365 administration and hardening
Exchange Online with SPF, DKIM and DMARC; anti-phishing, Safe Links and Safe Attachments; SharePoint, OneDrive and Teams governance (external sharing, guest access, retention); and the routine work of adding, changing and removing users. Hardening should follow a written baseline, such as blocking legacy protocols and auto-forwarding to external domains.
Identity and access
Entra ID with MFA for every user, Conditional Access by location, device compliance and user group, self-service password reset, and regular review of privileged roles and guest accounts. Identity is where most cloud incidents start, so it should be explicit in scope, not implied.
Devices
Intune enrolment and compliance for Windows, macOS, iOS and Android, including encryption, patching and remote wipe. If the provider does not manage devices, someone else has to, and gaps appear between the two.
Azure and AWS workloads
Virtual machines, storage, networking, VPN gateways and the cost line that goes with them. Expect monitoring, patching, backup and a monthly report on cost and performance. If you also need ICP-compliant hosting for mainland China, ask for it by name, because it is a separate design question.
Backup and recovery
Microsoft 365 data is not fully protected by default retention, and VM snapshots are not a backup policy. A cloud managed service should back up Microsoft 365, servers and endpoints to a defined retention, test restores, and report on them. Brocent's cloud managed backup service covers this, and the backup and recovery pricing page shows the software options if you prefer to license it yourself.
Monitoring, security and the help desk
24/7 monitoring, patching, endpoint protection, web filtering and a help desk for users. Brocent's managed IT plans include these at every tier: 24/7 NOC monitoring, help desk, managed firewall, patch management, base antivirus/EDR, backup and DR (including immutable backup), password and credential management, DMARC monitoring, web content filtering, a named vCIO with a technology roadmap, customer-owned documentation and credentials, and SLA commitments.
Reporting and governance
A monthly report showing tickets, SLA performance, security posture, backup results and cloud cost, plus a quarterly review with someone who can change the roadmap.
How are cloud managed services priced?
Three models are common in Hong Kong. Most proposals combine them.
Per user, per month
A fixed monthly fee for each user, covering the help desk, Microsoft 365 administration, identity, devices, monitoring and security baseline. It suits firms whose estate is mostly Microsoft 365 and laptops, because cost follows headcount and is easy to budget.
Brocent publishes its Hong Kong per-user prices. At list price, before any standing discount applied in the quote tool, the plans are:
- Startup (1 to 5 employees): from HK$855.14 per user per month.
- Established (5 to 300 employees): HK$1,247.40 per user per month.
- Growth (10 to 500 employees): HK$1,561.21 per user per month.
- Enterprise: quoted.
Prices are per user per month, excluding tax. The Hong Kong managed IT quote tool prices your exact headcount and shows any standing discount.
Per resource
Servers, VMs, network devices and backup are usually priced per item, because their effort does not follow headcount. Brocent's published Hong Kong add-on rates:
- Virtual Server: HK$1,364.77 per server per month.
- Network and wireless: HK$808.07 per month for up to 10 devices.
- Cloud backup: HK$133.29 per device per month.
- Cloud VMs (small, medium, large) and backup storage beyond the included quota: quoted.
Platform costs are separate. The cloud subscription itself (Microsoft 365 licences, Azure or AWS consumption, or a hosting platform) is billed at the platform's price; see the cloud hosting and application services pricing page for hosting list prices, with Brocent's management quoted on top.
Retainer or prepaid hours
For firms with an in-house IT person who only need specialist help for projects and escalations, a block of hours is often cheaper than a per-user plan. Brocent's Token Service sells prepaid hours valid for 12 months; it is a different product from a managed plan and should be compared on how often you actually call for help.
Per-user plan vs per-resource billing vs retainer: which fits?
- Per-user plan: best for a Microsoft 365-centred firm of 20 to 300 staff with no in-house IT team. Predictable, covers the help desk and devices, and the price moves with headcount. Less suited to a company with few users and many servers.
- Per-resource billing: best for the infrastructure part of the estate, such as VMs, servers, network and backup. Fair, because cost follows what is actually managed, but harder to budget if the estate grows quickly. Usually added to a per-user plan, not used alone.
- Retainer or prepaid hours: best for firms with their own IT staff who need a specialist for projects, escalations and cover. Cheapest when demand is low; poor value as a substitute for daily support, and it rarely includes 24/7 monitoring.
How to choose a cloud managed service provider in Hong Kong
Ask every provider the same questions, in writing.
What exactly is in scope?
Ask for a scope list by area: Microsoft 365, identity, devices, Azure/AWS, backup, security, help desk. Anything not on the list is not included. Pay attention to backup and device management, where gaps are most common.
What is the SLA, and what does it cover?
Ask for response and resolution times by priority, the service window (business hours or 24×7), and what happens outside it. Compare them like for like.
Who are the engineers, and where are they?
A Hong Kong firm usually wants local engineers who can come on site and speak Cantonese, English and Mandarin. Ask where the help desk sits and whether onsite visits are included or charged. The Hong Kong IT support page shows Brocent's local team and office.
Who owns the tenant, the credentials and the documentation?
You should. Global admin accounts, break-glass accounts, documentation and configuration exports should belong to the company, and the contract should say so. Brocent's managed IT plans list customer-owned documentation and credentials as included at every tier.
How do you leave?
Ask for the minimum term, the notice period and the exit process before you sign. A provider confident in its service will describe a structured handover.
How do you help us meet our obligations?
For Hong Kong firms, the Personal Data (Privacy) Ordinance shapes where data sits, who can access it and how incidents are handled. A provider should explain how its controls (data residency, access control, logging and incident procedures) help you meet those obligations, without claiming to make you compliant on its own.
Cloud managed services vs generic managed IT services
If your estate is mostly Microsoft 365 and laptops, a "cloud managed service" and a general managed IT service are largely the same thing: one per-user plan covering the help desk, devices, identity, security and the cloud tenant. The difference matters when you also run servers, VMs or applications in Azure or AWS. Then check that the proposal names those workloads, prices them per resource and includes their monitoring, patching and backup.
Case study (illustrative composite, not a real client): A Hong Kong trading company with about 120 staff ran Microsoft 365, four Azure VMs for its ERP and file services, and a local IT officer who also handled procurement. Backup existed only as VM snapshots, and guest access in Teams had never been reviewed. It moved to a per-user managed plan for staff and devices, per-resource billing for the four servers and Microsoft 365 backup, and kept the IT officer as the internal coordinator. The first quarterly review focused on Conditional Access, guest clean-up and restore testing. The scenario is a composite of common requirements, not a reported outcome.
Frequently asked questions
What does "cloud managed service" mean in Hong Kong?
An outsourced service that runs a company's existing cloud estate (Microsoft 365, Azure or AWS workloads, identity, devices and backup) under an SLA. It is different from cloud hosting, which is where the workload runs.
How much do cloud managed services cost in Hong Kong?
Brocent's published Hong Kong managed IT plans start from HK$855.14 per user per month at list price, with servers, network devices and backup priced per resource, and cloud platform costs billed separately. Use the quote tool for your headcount.
Is cloud backup included?
Brocent's plans include backup and disaster recovery, including immutable backup, at every tier; per-device cloud backup is a published add-on at HK$133.29 per device per month, and storage beyond the included quota is quoted. Ask any provider what is backed up, to what retention, and how often restores are tested.
Do we still pay for Microsoft 365 and Azure separately?
Yes. Licences and cloud consumption are billed at the platform's price. The managed service fee covers the people, tooling and SLA that run them.
Can a provider manage both Azure and AWS?
Yes, and many Hong Kong firms use both. Ask for both to be named in scope, with monitoring, patching and cost reporting for each.
What is the difference between a cloud managed service provider and a cloud-based managed service provider?
Usually none. Both terms describe a provider that manages cloud services for you, often delivering its own service from cloud-based tools. Focus on the scope and SLA, not the label.
How long does onboarding take?
It depends on the estate. Brocent's Microsoft 365 onboarding follows seven structured steps, and its published guide for typical Hong Kong Microsoft 365 migrations is two to six weeks. Taking over an existing, stable cloud estate is usually quicker than a migration.
Next step
List your Microsoft 365 user count, your servers and VMs, your backup setup and the hours you need cover. Then price the per-user plan and add-ons for Hong Kong in the quote tool, and ask a consultant to confirm the scope against your estate.
Share:
Ready to take action?
Turn these insights into a roadmap for your business.
Book a 15-minute no-obligation consultation with our APAC IT experts. We'll review your current setup and provide a tailored IT roadmap within 24 hours.
Related services
Free Checklist
10 Critical Checks Before Expanding IT to Greater China
PIPL compliance, network segmentation, bilingual helpdesk setup, and more — everything your IT team needs before Day 1 in China.
Request the checklist →📬 Monthly Asia IT Insights
China compliance updates, cybersecurity alerts, and IT tips for APAC teams — once a month.
No spam. Unsubscribe anytime.