B BROCENT

managed IT

Cover image for Brocent IT blog post: Managed Backup Services vs Backup Software: Cost, RPO/RTO & What's Included

October 15, 2026 | 12 min

Managed Backup Services vs Backup Software: Cost, RPO/RTO & What's Included

What a managed backup service adds to backup software, how to compare cost lines, how long large restores really take, how 3-2-1 works in a small office and eight questions for choosing a provider in Hong Kong.

Cover image for Brocent IT blog post: IT Support Services in Singapore: Pricing, SLAs & Providers (2026)

October 14, 2026 | 12 min

IT Support Services in Singapore: Pricing, SLAs & Providers (2026)

How Singapore companies buy IT support: break/fix, block hours, per-user managed IT and co-managed models, what SLA response times to expect, what moves the price, provider types and a shortlist checklist, with Brocent's current Singapore price table embedded live.

Cover image for Brocent IT blog post: The Cost of Running Out of Support: What End-of-Life Systems Actually Do to an IT Bill and a Risk Profile

October 14, 2026 | 22 min

The Cost of Running Out of Support: What End-of-Life Systems Actually Do to an IT Bill and a Risk Profile

A research report on what end-of-support systems cost. It works through Microsoft's published Windows 10 Extended Security Updates price, doubling and cumulative-purchase rules, the costs that never appear on a renewal quote, named end-of-life entries in CISA's Known Exploited Vulnerabilities catalogue, what Singapore's Cyber Essentials mark says about end-of-support assets, and how to choose between refreshing, extending and running a system out. The Year Two and Year Three figures are the author's arithmetic from Microsoft's rule, and observations about client estates are Brocent's own and labelled as such.

Cover image for Brocent IT blog post: Managed IT Support Services: What's Included, SLAs & Price per User (HK/SG 2026)

October 13, 2026 | 11 min

Managed IT Support Services: What's Included, SLAs & Price per User (HK/SG 2026)

What managed IT support services include, the SLA response times to insist on, how per-user, per-device and flat-fee pricing differ, and a checklist for comparing providers in Hong Kong and Singapore, with the current Brocent price table embedded live.

Cover image for Brocent IT blog post: Your IT Provider Is Part of Your Attack Surface: Third-Party Cyber Risk From Both Sides of the Contract

October 13, 2026 | 23 min

Your IT Provider Is Part of Your Attack Surface: Third-Party Cyber Risk From Both Sides of the Contract

A research report on third-party cyber risk when the third party is your IT provider. It sets out what the joint CISA/NSA/FBI advisory AA22-131A tells buyers and providers to do, what Verizon's 2026 Data Breach Investigations Report measures about third-party involvement in breaches, how the US SEC disclosure rules raise the stakes for notification terms, and what a buyer should put in the contract rather than the questionnaire. Observations about buyer questions in Hong Kong and Singapore are Brocent's own and are labelled as such.

Cover image for Brocent IT blog post: The Hidden Operating Cost of IT Sprawl: When Apps, Devices, and Vendors Multiply Faster Than Headcount

October 07, 2026 | 22 min

The Hidden Operating Cost of IT Sprawl: When Apps, Devices, and Vendors Multiply Faster Than Headcount

A research report on the operating cost of IT sprawl for companies of 30 to 300 people. It explains why that cost scales with people multiplied by systems rather than with the software invoice, sets out what Zylo's 2026 SaaS Management Index, Productiv's State of SaaS series and Flexera's 2026 State of ITAM report actually measure and where, and gives a practical inventory-and-reduction framework. Observations about Hong Kong and Singapore clients are Brocent's own and are labelled as such.

Cover image for Brocent IT blog post: The MSP Consolidation Wave: What Private-Equity Roll-Ups Mean for IT Buyers in the US, Hong Kong, and Singapore

September 30, 2026 | 23 min

The MSP Consolidation Wave: What Private-Equity Roll-Ups Mean for IT Buyers in the US, Hong Kong, and Singapore

A research report on provider-side consolidation in managed IT services, written for the buyer instead of the seller. It sets out what is actually documented about private-equity-backed MSP acquisitions in the United States, states plainly that no comparable record exists for Hong Kong or Singapore, and declines to extrapolate one market onto the other. Market figures are attributed to Omdia, Channel Dive, Service Leadership and company press releases; what happens to clients after an acquisition is Brocent's own qualitative observation and is labelled as such. It closes with the ownership questions and contract clauses a buyer can raise before signing a multi-year agreement.

Cover image for Brocent IT blog post: Twelve Racks, One Weekend: A Hong Kong Rack Migration Runbook

September 29, 2026 | 18 min

Twelve Racks, One Weekend: A Hong Kong Rack Migration Runbook

For a group IT manager at a Hong Kong-headquartered manufacturer facing a lease deadline, moving twelve rack servers, a firewall pair, switches and a small SAN out of a landlord's building server room into a commercial facility with two provisioned 42U cabinets. Not the strategic guide to deciding whether and where to relocate a data centre — this is the move-night runbook itself: the pre-move survey, labelling and cabinet-mapping discipline, de-rack order, packing and transport, re-rack and power-on sequencing, the rollback point, and what out-of-hours physical work actually costs to arrange. Illustrative composite scenario; no Hong Kong facility operator is named as origin or destination.

Cover image for Brocent IT blog post: Running a Bilingual IT Service Desk Inside Lark or Feishu: What Actually Changes

September 28, 2026 | 16 min

Running a Bilingual IT Service Desk Inside Lark or Feishu: What Actually Changes

For the IT operations manager responsible for the Hong Kong and Singapore offices of a mainland-headquartered consumer brand whose whole company already runs on Lark or Feishu. An illustrative composite scenario on what changes when chat becomes the intake channel, the non-negotiables that turn a chat channel into a real service desk, bilingual routing across three written languages, and what a realistic first-line resolution rate depends on.

Cover image for Brocent IT blog post: 120 Licences, Nine Countries, No Office: Managing Microsoft 365 for a Remote Team

September 28, 2026 | 19 min

120 Licences, Nine Countries, No Office: Managing Microsoft 365 for a Remote Team

For the head of operations or chief of staff at a roughly 120-person fully remote software company, with staff across Asia, the Gulf, Europe and Australia and no office anywhere. Why ordinary licence hygiene — not a security programme — is what a distributed Microsoft 365 tenant actually needs: joiners, movers and leavers as a process rather than a checklist, monthly licence right-sizing, the small non-negotiable security baseline (MFA, conditional access basics, a recoverable backup), and devices managed with no office to issue them from. Not a migration guide — this is for a tenant you already have.

Cover image for Brocent IT blog post: Stage One Is a Tenant and Two Laptops: Building IT for a Newly Licensed Hong Kong Asset Manager

September 25, 2026 | 21 min

Stage One Is a Tenant and Two Laptops: Building IT for a Newly Licensed Hong Kong Asset Manager

For the COO or operations lead at a newly licensed 3-15 person Hong Kong asset manager in a serviced office. Why the commercial clock and the regulatory clock cause most IT rebuilds; the smallest defensible stage-one set that lets you trade tomorrow; how to keep your own audit trail while staff work inside a partner's or administrator's environment; what the full licensed estate adds; what deliberately not to buy yet; and how each stage maps to the evidence regulators and auditors typically ask for.

Cover image for Brocent IT blog post: Service Credits and a Performance Bond: What an Enforceable IT SLA Looks Like at Renewal

September 25, 2026 | 26 min

Service Credits and a Performance Bond: What an Enforceable IT SLA Looks Like at Renewal

For the CFO or group operations director of a Hong Kong trading and distribution group renewing an IT contract whose SLA was met on paper and missed in practice. Why the measurement layer — clock start, pause rules, reclassification, auditable ticket data — matters before any credit rate; how service credits, caps, earn-back and set-off against invoices work as mechanisms; when a performance bond or parent guarantee is proportionate; and the exit and documentation clauses that often matter more. A commercial guide, not legal advice.

Cover image for Brocent IT blog post: One Engineer Is a Single Point of Failure: Leave Cover and Backfill for Onsite IT in Singapore

September 23, 2026 | 17 min

One Engineer Is a Single Point of Failure: Leave Cover and Backfill for Onsite IT in Singapore

For the operations director at a Singapore 3PL, warehouse or light-manufacturing operator running exactly one embedded IT engineer. Why planned leave, sudden illness and resignation behave as three different problems, what "no backfill" actually means on a published rate card versus "seamless leave cover" on a service page, the four ways to buy redundancy and what each really costs, why "minimum two, ideally three" is often the right diagnosis with the wrong prescription, and the four things that must already be true before any cover arrangement works.

Cover image for Brocent IT blog post: The Only Person Who Knew: Handing Over IT When a Hong Kong Firm's Sole IT Manager Resigns

September 23, 2026 | 17 min

The Only Person Who Knew: Handing Over IT When a Hong Kong Firm's Sole IT Manager Resigns

A four-week plan for the managing partner or COO of a 30-80 person Hong Kong professional-services firm whose only IT person has just resigned. Why the risk is the undocumented estate rather than the vacancy, the four kinds of knowledge that leave and how differently they expire, what to capture in each week — access, inventory, the tacit layer, then verification by doing — and the decision that has to be made before the notice period ends: replace the person, or replace the model.

Cover image for Brocent IT blog post: The True Cost of an IT Hire: Wage, Statutory On-Costs, and Coverage Economics in Hong Kong, Singapore, and the United States

September 23, 2026 | 20 min

The True Cost of an IT Hire: Wage, Statutory On-Costs, and Coverage Economics in Hong Kong, Singapore, and the United States

A labour-economics report for anyone budgeting an IT team across Hong Kong, Singapore and the United States. It asks what one IT employee actually costs an employer once statutory on-costs and coverage economics are counted, and why that number resolves so differently in three markets that look comparable on a salary table. Built on MPFA, CPF Board, MOM, Hong Kong C&SD, US BLS, SSA, IRS and KFF figures confirmed at the time of writing, with every assumption disclosed and every excluded cost named. It deliberately does not answer whether to hire or outsource — that comparison is already published, per market, and is linked instead.

Cover image for Brocent IT blog post: Cantonese on the Floor, English in the Ticket: What a Language Requirement Does to Onsite IT Cost and Lead Time

September 22, 2026 | 15 min

Cantonese on the Floor, English in the Ticket: What a Language Requirement Does to Onsite IT Cost and Lead Time

A guide for the regional IT lead who has just written a language line into an onsite scope of work. Why "bilingual" is too blunt a requirement to price, the three separate jobs a language actually does, how each additional hard requirement multiplies against the candidate pool and moves the start date before it moves the rate, the split-layer model Brocent runs instead, and a rewritten requirement that prices well and staffs quickly.

Cover image for Brocent IT blog post: The First Hour Costs the Most: Per-Visit IT Billing Against a Retainer

September 22, 2026 | 15 min

The First Hour Costs the Most: Per-Visit IT Billing Against a Retainer

A method for the finance or procurement lead holding two IT quotes shaped differently — one per hour, one per user per month. Why they cannot be compared as written, how each model actually bills, a five-step conversion onto one axis, the three risks that appear in neither number, when per-visit is genuinely right and when it quietly stops being, and the hybrid almost every organisation lands on.

Cover image for Brocent IT blog post: Embedded, Scheduled or Dispatched: Choosing an Onsite IT Pattern for a Hong Kong Office of 40

September 22, 2026 | 15 min

Embedded, Scheduled or Dispatched: Choosing an Onsite IT Pattern for a Hong Kong Office of 40

A decision guide for the regional IT manager responsible for a 30-60 person Hong Kong office with no local IT person. The three onsite patterns Hong Kong buyers actually ask for, what each is genuinely good at, the break-even band computed from Brocent's published Hong Kong dispatch and dedicated-engineer rates, the four variables that move the answer, and why the hands layer belongs inside a managed plan rather than beside it.

Cover image for Brocent IT blog post: They Asked for an ECSE, Not a Survey: Why Certification and Tooling Decide a Wi-Fi Survey's Result

September 21, 2026 | 19 min

They Asked for an ECSE, Not a Survey: Why Certification and Tooling Decide a Wi-Fi Survey's Result

A guide for the office manager or IT lead at the Hong Kong office of an international law firm planning a Wi-Fi survey and access-point installation. Why two engineers can survey the same floor and reach opposite conclusions, what an Ekahau certification does and does not signify, what each survey instrument can and cannot see, the three questions a survey answers and the one it cannot, what you should receive at the end, the confidentiality layer specific to a professional-services floor, and who runs the access points once the survey is over.

Cover image for Brocent IT blog post: They Bought the Access Points First: A Singapore Warehouse and the Survey That Should Have Come Before

September 18, 2026 | 22 min

They Bought the Access Points First: A Singapore Warehouse and the Survey That Should Have Come Before

A guide for the operations or facilities lead at a Singapore warehouse, 3PL or light-manufacturing site whose handheld scanners drop between aisles. Why a coverage problem cannot be configured away, what a wireless site survey actually measures, the three survey types and the different question each one answers, the published man-day scoping for each, the extras that catch people out, and what has to happen to the access points once they are finally in the right places.

Cover image for Brocent IT blog post: Same Floor, Every Afternoon: What Managed WiFi Should Change for a Singapore Professional Services Firm

September 17, 2026 | 22 min

Same Floor, Every Afternoon: What Managed WiFi Should Change for a Singapore Professional Services Firm

A guide for the office manager or sole IT lead at an 80-150 person Singapore professional services firm whose WiFi keeps dropping on the same floor every afternoon. Why an intermittent fault with no history cannot be fixed, what "managed WiFi" usually means in Singapore versus who owns the control plane, the three ways to get it, what changes once the access points sit in one controller, and the per-access-point and add-on figures read from source on 17 September 2026.

Cover image for Brocent IT blog post: After the Wi-Fi Installation Is Signed Off, Who Runs It? A Hong Kong Retail Chain's Wireless Network Solution

September 17, 2026 | 23 min

After the Wi-Fi Installation Is Signed Off, Who Runs It? A Hong Kong Retail Chain's Wireless Network Solution

A Hong Kong retail chain's fourteen outlets each got a proper Wi-Fi installation from whichever contractor won the fit-out, and each was signed off. What that produces eighteen months later (till outages that need a site visit, every new shop rebuilt from scratch, firmware nobody upgrades, no record for an auditor), why the real question is who runs the network for five years after acceptance, three ways to manage Wi-Fi across a chain, and what a managed controller looks like in practice, with pricing read on 17 September 2026.

Cover image for Brocent IT blog post: The Controller Nobody Wanted to Run: Why a Three-Office Firm Stopped Hosting Its Own Wi-Fi Brain

September 16, 2026 | 17 min

The Controller Nobody Wanted to Run: Why a Three-Office Firm Stopped Hosting Its Own Wi-Fi Brain

A cross-market guide for anyone who already owns UniFi access points and is deciding how to run the controller. What a controller actually is and why "free software" is the most expensive sentence in the decision, the three ways to run one with what each really costs, the three things that break at three sites, what changes when someone else operates it, the Protect/Access/Talk boundary as architecture rather than a limitation, and the per-access-point figure read from source on 16 September 2026.

Cover image for Brocent IT blog post: The Regional HQ That Became Everyone's Helpdesk: A European Group's Singapore Office

September 16, 2026 | 15 min

The Regional HQ That Became Everyone's Helpdesk: A European Group's Singapore Office

An illustrative composite: a European industrial group's Singapore regional headquarters, staffed with two people for governance, spends eighteen months answering first-line tickets from plants and sales offices in Malaysia, Thailand and Vietnam. Why a bigger HQ team does not fix it, what governance should keep and what a delivery layer should take, how a single regional asset view changes reporting, and which markets actually carry a published rate.

Cover image for Brocent IT blog post: Four Properties, One IT Person, No Weekends Off: A Singapore Hospitality Group

September 16, 2026 | 15 min

Four Properties, One IT Person, No Weekends Off: A Singapore Hospitality Group

An illustrative Singapore composite: a ~150-staff hospitality group running two hotels, a restaurant and a cafe-bar loses its only IT manager to a month's notice. Why the knowledge cliff is a structural failure rather than a documentation one, why hiring another generalist re-buys the same risk, what a notice-period transition should actually contain, and the published per-user plan figures to price it against.

Cover image for Brocent IT blog post: Nobody Could Get to Tuas: A Singapore Marine Services Operator's Remote-Only Problem

September 15, 2026 | 16 min

Nobody Could Get to Tuas: A Singapore Marine Services Operator's Remote-Only Problem

An illustrative Singapore composite: a marine and offshore services operator split between a CBD office and a Jurong-Tuas yard, whose remote helpdesk covered the office perfectly and the yard not at all. Why remote-first is right but remote-only is not, the real published Singapore dispatch and dedicated-engineer rates, the break-even arithmetic between them, and the three ways to cover the physical half of IT.

Cover image for Brocent IT blog post: Three Proposals, One Real Difference: How a Singapore Engineering Consultancy Chose

September 15, 2026 | 17 min

Three Proposals, One Real Difference: How a Singapore Engineering Consultancy Chose

An illustrative Singapore composite: an architecture and engineering consultancy with three managed IT proposals on the table, all quoting similar monthly figures, all promising 24/7 support. Why the comparison stalled for six weeks, what was actually wrong with it, and the four structural questions — one engine or a stack, a takeover with a finish line, an inspectable session log, and who owns the documentation — that made the decision possible.

Cover image for Brocent IT blog post: Twelve Headcount, One Number: A Singapore Trading House Rebuilds Its IT Budget Per Person

September 15, 2026 | 18 min

Twelve Headcount, One Number: A Singapore Trading House Rebuilds Its IT Budget Per Person

An illustrative Singapore composite: a ~120-person commodities trading house whose IT line swung between S$2,000 and S$40,000 a month with no pattern a forecast could use. Why project-shaped IT spending cannot be attributed to a desk, what per-user pricing actually changes (and what it does not), the live Singapore plan and token figures worked through against real headcount, and the three ways to buy IT support.

Cover image for Brocent IT blog post: Down During the Trade Show: A Hong Kong Distributor's WordPress Lead Engine

September 14, 2026 | 14 min

Down During the Trade Show: A Hong Kong Distributor's WordPress Lead Engine

A composite Hong Kong scenario: a B2B industrial distributor whose WordPress catalogue and quote form carry the entire inbound pipeline, going down on day two of a trade show at four times a normal Tuesday's traffic. Why deferring updates was rational, what autoscaling actually changes, the real Autonomous tiers and overage arithmetic, and the three ways to run a site like this.

Cover image for Brocent IT blog post: The Droplet Nobody Owned: A Hong Kong Consumer Brand's Storefront Hosting Problem

September 14, 2026 | 15 min

The Droplet Nobody Owned: A Hong Kong Consumer Brand's Storefront Hosting Problem

A composite Hong Kong scenario: two revenue-carrying storefronts on one unmanaged virtual machine, an unknown patch state, a snapshot nobody has restored, and an agency that closed in 2023. Why the real decision is managed versus unmanaged, what the platform figures do and do not include, and what migrating off an inherited server involves.

Cover image for Brocent IT blog post: What Happens to the Incumbent's On-Site Staff? A Rebadging Story

September 14, 2026 | 16 min

What Happens to the Incumbent's On-Site Staff? A Rebadging Story

A composite scenario: a vendor transition planned around systems and contracts, with no thought given to the four on-site engineers until six weeks before cutover. What rebadging is, the four engagement models it sits inside, the five-phase framework behind it, and the cases where a fresh hire is the more honest answer.

Cover image for Brocent IT blog post: Whose Direct Footprint Matches Your Office Map? IT Support for US Companies in Asia

September 11, 2026 | 19 min

Whose Direct Footprint Matches Your Office Map? IT Support for US Companies in Asia

A composite scenario: a US industrial-software company with Tokyo, Seoul and Shanghai offices collects three US MSP quotes within fifteen percent of each other and cannot tell them apart. Why 'global coverage' is unevaluable until it is broken into tiers, and the five questions that separate the proposals.

Cover image for Brocent IT blog post: Five Days to Beijing: Destroying a China Office's Drives Without Shipping Them Out

September 11, 2026 | 18 min

Five Days to Beijing: Destroying a China Office's Drives Without Shipping Them Out

A composite scenario: a foreign-invested group's China engineering centre retires ninety workstations and eleven servers, and its group process says ship the drives to Hong Kong. Why that one routing decision creates three separate problems, and why the destruction capability can travel instead.

Cover image for Brocent IT blog post: The Number That Made Them Look Temporary: A 400 Hotline for a China Office

September 11, 2026 | 18 min

The Number That Made Them Look Temporary: A 400 Hotline for a China Office

A composite scenario: a European instruments maker's sixty-person China office runs on twelve personal mobile numbers with no switchboard, and starts losing tenders on the after-sales line of the scorecard. Why a 400 hotline is an entity question rather than a technical one, and why the real gap was governance, not telephony.

Cover image for Brocent IT blog post: The IT Roadmap Nobody Owned: A Singapore Regional HQ's vCIO Story

September 11, 2026 | 14 min

The IT Roadmap Nobody Owned: A Singapore Regional HQ's vCIO Story

A composite scenario from Singapore: a manufacturer's ASEAN regional HQ discovers, during a routine handover, that its multi-year technology roadmap was never a document. Why the strategic layer belongs to a named accountable person and a written artefact the company owns — and why that combination is included in a managed IT plan rather than sold as an upsell.

Cover image for Brocent IT blog post: Android Without Google: Managing Devices for a Foreign Company's China Staff

September 11, 2026 | 17 min

Android Without Google: Managing Devices for a Foreign Company's China Staff

A composite scenario: a European group extends its three-year-old global MDM standard to a 70-person China office, and Android enrolment simply never completes. Why China-market Android breaks the Android Enterprise model, what a China-specific enrolment path actually requires, and why the licence was never the missing piece.

Cover image for Brocent IT blog post: One Engineer, Every Day, On Site: Staff Augmentation for a Singapore Manufacturer

September 11, 2026 | 19 min

One Engineer, Every Day, On Site: Staff Augmentation for a Singapore Manufacturer

A composite scenario from Singapore: a 155-person contract manufacturer running two shifts on an IT support arrangement it signed at 70 office-based staff. The crossover arithmetic between dispatch and a dedicated onsite engineer, why the sizing ladder's 'and/or devices' clause changes the answer in manufacturing, and what a placement actually contains beyond a body in the building.

Cover image for Brocent IT blog post: The Lease Ended and the Racks Were Still Full: Data Centre Decommissioning in Singapore

September 11, 2026 | 19 min

The Lease Ended and the Racks Were Still Full: Data Centre Decommissioning in Singapore

A composite scenario from Singapore: a colocation lease reaches its end date with two racks still installed, no current inventory, and a restoration clause discovered six weeks out. Why a decommission is four projects rather than one, the ten-stage process in order, the lead times that actually cause missed deadlines, and what a quote really depends on.

Cover image for Brocent IT blog post: The Backup That Existed Only in Theory: Cloud Backup for a Singapore Edtech Company

September 11, 2026 | 15 min

The Backup That Existed Only in Theory: Cloud Backup for a Singapore Edtech Company

A composite scenario from Singapore edtech: a content server fails, and the restore reveals the nightly backup job has been failing silently for twenty-three days. Why job-status monitoring, an offsite copy independent of the primary environment, and dated restore drills are what separate a backup schedule from something you can actually rely on.

Cover image for Brocent IT blog post: IT Support in Beijing for a Foreign Insurer's Office: The Evidence Test

September 10, 2026 | 18 min

IT Support in Beijing for a Foreign Insurer's Office: The Evidence Test

A composite scenario: a foreign insurance group's licensed Beijing entity passes every day-to-day IT check and fails the one that matters at audit time - can it show access, patch and data-location records for policyholder data.

Cover image for Brocent IT blog post: The Board Asked Who Owns Cybersecurity: A Hong Kong Firm's vCISO Answer

September 04, 2026 | 14 min

The Board Asked Who Owns Cybersecurity: A Hong Kong Firm's vCISO Answer

A composite scenario from Hong Kong: a professional-services firm's board asks who actually owns cybersecurity, and the honest answer is that it's split across the office manager, the outsourced IT vendor, and nobody in particular. Why a fractional CISO — not a full-time hire, and not leaving it with the IT vendor — closes that gap, and what the engagement actually looks like alongside a managed IT plan.

Cover image for Brocent IT blog post: Firing Your MSP Without Breaking Anything: How a Hong Kong Trading Company Switched Providers

September 04, 2026 | 15 min

Firing Your MSP Without Breaking Anything: How a Hong Kong Trading Company Switched Providers

A composite scenario from Hong Kong: a trading company's operations director has decided to leave the incumbent IT provider three times in one year, and backed off each time because nobody could describe what the switch would actually look like. What a structured, shadow-supported transition changes about that decision.

Cover image for Brocent IT blog post: Who's Watching at 3 AM? A Hong Kong Retailer's SOC Decision

September 04, 2026 | 14 min

Who's Watching at 3 AM? A Hong Kong Retailer's SOC Decision

A composite scenario from Hong Kong: a multi-outlet retail chain's ops director asks a simple question during a security review — who is actually watching our systems at 3 AM — and the honest answer is nobody. Why the fix isn't another tool, and how SOC as a service closes the gap between detection and response.

Cover image for Brocent IT blog post: The Invoice That Almost Went Through

September 04, 2026 | 15 min

The Invoice That Almost Went Through

A composite scenario from Hong Kong: a small marketing agency nearly pays a fraudulent supplier invoice, caught only because a staff member happens to phone to confirm. Why the one cybersecurity video every new hire watches once isn't training, and what a managed, measured awareness programme changes instead.

Cover image for Brocent IT blog post: Three Weeks to Launch, No Pen Test Booked

September 04, 2026 | 17 min

Three Weeks to Launch, No Pen Test Booked

A composite scenario from Hong Kong: a tech startup's public launch date is set, and someone finally asks whether the app has been pen-tested three weeks before go-live. What actually fits into the time that's left, and why the test needs to be planned against the launch date, not squeezed in after it.

Cover image for Brocent IT blog post: The Patch That Was Three Months Overdue: A Hong Kong Firm's Ransomware Near-Miss

September 04, 2026 | 14 min

The Patch That Was Three Months Overdue: A Hong Kong Firm's Ransomware Near-Miss

A composite scenario from Hong Kong: a backup catches a ransomware attempt mid-way through, and the post-incident review traces the entry point back to a server patch that had been sitting overdue for three months on a system nobody was tracking. What changes when patching becomes a managed, visible discipline instead of a task someone has to remember.

Cover image for Brocent IT blog post: The Password Reuse Nobody Flagged: MFA Rollout at a Hong Kong Accounting Firm

September 04, 2026 | 15 min

The Password Reuse Nobody Flagged: MFA Rollout at a Hong Kong Accounting Firm

A composite scenario from Hong Kong: a routine IT review at an accounting firm finds a staff member reusing the same password across email and the practice-management system, with no MFA on either. Why the fix isn't a stricter password policy, and what a properly designed MFA and conditional access rollout actually looks like alongside a managed IT plan.

Cover image for Brocent IT blog post: Guests Complained About Wi-Fi, Not Rooms: Managed Wireless at a Hong Kong Serviced Office Operator

September 04, 2026 | 21 min

Guests Complained About Wi-Fi, Not Rooms: Managed Wireless at a Hong Kong Serviced Office Operator

A composite scenario from Hong Kong: a serviced-office operator running four locations keeps hearing the same tenant complaint — Wi-Fi, not the fit-out — and finds each site's wireless was set up separately with no shared standard and nobody able to see all four at once. Why the real question is who runs the UniFi controller, what Brocent's hosted controller covers at a per-access-point monthly price, where the scope boundary sits, and why the managed IT plan is still the thing that solves the underlying problem.

Cover image for Brocent IT blog post: The Router From the Telco Wasn't Enough: A Hong Kong Manufacturer's Managed Firewall Upgrade

September 04, 2026 | 15 min

The Router From the Telco Wasn't Enough: A Hong Kong Manufacturer's Managed Firewall Upgrade

A composite scenario from Hong Kong: a light-manufacturing SME had run for years on the router its telco bundled in with the internet line, until a routine security review found no real firewall policy at all — just factory defaults on a network that had grown to include production-floor equipment alongside office PCs. Why a managed, SME-scale next-gen firewall — not an enterprise offering, and not the telco's bundled router — closed that gap, and what it looks like bundled into a managed IT plan.

Cover image for Brocent IT blog post: The Router That Failed at 2 AM: 24/7 NOC Monitoring for a Hong Kong Clinic Group

September 04, 2026 | 15 min

The Router That Failed at 2 AM: 24/7 NOC Monitoring for a Hong Kong Clinic Group

A composite scenario from Hong Kong: a router fails overnight at one of a multi-clinic healthcare group's eight locations, and nobody knows until the first patient of the day can't be checked in — because the helpdesk watches the software, not the network hardware underneath it. Why network hardware needs proactive, always-on monitoring, and what that looks like in practice: 1-minute health checks, elapsed-time SLAs, and in-country spares.

Cover image for Brocent IT blog post: What a Failed Vulnerability Scan Cost a Hong Kong Law Firm's Cyber Policy

September 04, 2026 | 15 min

What a Failed Vulnerability Scan Cost a Hong Kong Law Firm's Cyber Policy

A composite scenario from Hong Kong: a law firm's cyber-insurance broker returns the renewal questionnaire with one line highlighted — a forgotten, internet-facing service with a known vulnerability. What insurers and clients are actually asking for, and what a real scanning practice looks like.

Cover image for Brocent IT blog post: The Pen-Test Requirement a Hong Kong Payments Firm Didn't See Coming

September 04, 2026 | 15 min

The Pen-Test Requirement a Hong Kong Payments Firm Didn't See Coming

A composite scenario from Hong Kong: a licensed payments firm faces a routine regulatory review asking for evidence of penetration testing, and finds a two-year-old PDF isn't evidence of anything current. What a maintained testing cadence changes, and where an IT partner's role stops.

Cover image for Brocent IT blog post: Forty Old Laptops and No Paper Trail

September 04, 2026 | 15 min

Forty Old Laptops and No Paper Trail

A composite scenario from Hong Kong: a professional-services firm downsizing offices opens a storeroom during the move and finds forty retired laptops with no wipe log and no destruction record. What a certified IT asset disposal process actually proves, and why it belongs inside an ongoing managed IT plan rather than a one-off clean-out.

Cover image for Brocent IT blog post: The Analyst Who Left in March

September 04, 2026 | 16 min

The Analyst Who Left in March

A composite scenario from Hong Kong: a brokerage reconciles eighteen months of leavers against active accounts and the lists do not match. Why offboarding fails when it is treated as a task at the end rather than a record kept all along.

Cover image for Brocent IT blog post: The Alert That Stopped at “Quarantined”

September 04, 2026 | 15 min

The Alert That Stopped at “Quarantined”

A composite scenario from Hong Kong: a logistics company's base antivirus quarantines a suspicious file on a dispatcher's laptop and stops there. Why managed EDR is the layer that answers what happened next, and why it belongs inside a managed IT plan rather than as a standalone tool.

Cover image for Brocent IT blog post: The Laptop That Never Came Back From Dubai

September 04, 2026 | 16 min

The Laptop That Never Came Back From Dubai

A composite scenario from Hong Kong: a trading firm's buyer flies home from Dubai without the laptop she checked in with, and nobody can say what was on it. Why device control belongs inside a managed IT plan, not as a standalone tool.

Cover image for Brocent IT blog post: Opening Outlet Fourteen

September 04, 2026 | 15 min

Opening Outlet Fourteen

A composite scenario from Hong Kong: a 13-outlet F&B group signs the lease for outlet fourteen and finds the phone system is the longest lead item on the fit-out. Why a growing chain has a numbering problem, not a hardware problem.

Cover image for Brocent IT blog post: The Sales Laptop That Left the Country

September 04, 2026 | 15 min

The Sales Laptop That Left the Country

A composite scenario from Singapore: ninety people, company laptops, universally personal phones, and no way to answer "what was on it" when a laptop disappears between Jakarta and Changi. Why separability beats control in a BYOD programme.

Cover image for Brocent IT blog post: The Livestream That Couldn't Go Down

September 02, 2026 | 15 min

The Livestream That Couldn't Go Down

A composite scenario from Hangzhou: 45 people running a European brand's Tmall, JD and Douyin storefronts, with no local IT and a calendar dominated by 618 and 11.11. Why peak-shaped risk needs pre-positioned capacity rather than a permanent hire.

Cover image for Brocent IT blog post: Month-End Close Doesn't Care That You're a Shared Services Centre

September 01, 2026 | 17 min

Month-End Close Doesn't Care That You're a Shared Services Centre

A composite scenario from Singapore's back-office world: 110 people processing finance, HR and procurement for thirteen APAC markets, and an IT support contract sized on an average day. The four failure patterns specific to a shared services centre, and a support model that accounts for them.

Cover image for Brocent IT blog post: Your Servers Are in Tseung Kwan O. Who Actually Goes to the Cage?

September 01, 2026 | 15 min

Your Servers Are in Tseung Kwan O. Who Actually Goes to the Cage?

A composite scenario from Hong Kong's brokerage world: two racks in Tseung Kwan O, a four-person technology team, and no documented answer to who goes to the cage on a Sunday night. The five operational jobs a colocation contract leaves behind, and how to assign each one.

Cover image for Brocent IT blog post: The Building Is the Bottleneck: IT Support in a Kowloon East Industrial Block

September 01, 2026 | 18 min

The Building Is the Bottleneck: IT Support in a Kowloon East Industrial Block

A composite scenario from Kowloon East: a fifty-five-person import and distribution business running an office, a showroom and a stock floor in one converted industrial building. Why the building — not the contract — is usually what makes IT support feel slow, and how to design around it.

Cover image for Brocent IT blog post: Five Vendors, One Bill: A Hong Kong Firm's IT Consolidation Story

August 28, 2026 | 16 min

Five Vendors, One Bill: A Hong Kong Firm's IT Consolidation Story

A composite scenario from Hong Kong's professional-services sector: an office manager reconciling the IT budget finds five separate vendor invoices — antivirus, backup, tickets, remote access — that don't talk to each other, two of them paying for licenses nobody uses. What consolidating onto one connected platform actually finds and fixes.

Cover image for Brocent IT blog post: Too Small for a Full IT Contract, Too Big to Wing It: A Hong Kong Boutique Agency's Token Story

August 28, 2026 | 15 min

Too Small for a Full IT Contract, Too Big to Wing It: A Hong Kong Boutique Agency's Token Story

A composite scenario from Hong Kong's boutique agency and consultancy sector: an 11-person design studio outgrows ad hoc, favor-based IT help but doesn't have the headcount for a standard per-user MSP contract. What prepaid, pay-as-you-go token-based IT support actually looks like in practice.

Cover image for Brocent IT blog post: Why a Singapore Fintech's Cyber-Insurance Renewal Came Down to One Vulnerability Scan

August 28, 2026 | 15 min

Why a Singapore Fintech's Cyber-Insurance Renewal Came Down to One Vulnerability Scan

A composite scenario from Singapore's fintech sector: a cyber-insurance broker asks for a current, dated vulnerability-scan report, and nobody in the office has one. What insurers are actually asking for, and what a real recurring scanning practice looks like.

Cover image for Brocent IT blog post: Remote IT Support Without Losing Control: A Hong Kong Wealth Manager's Story

August 27, 2026 | 16 min

Remote IT Support Without Losing Control: A Hong Kong Wealth Manager's Story

A composite scenario from Hong Kong's boutique financial sector: a compliance officer blocks a routine remote-support ticket because nobody can say who connected, for how long, or to what. What auditable remote access actually looks like — consented, visible, logged and revocable.

Cover image for Brocent IT blog post: China Employment Law for Foreign-Invested Enterprises: What IT and Ops Leaders Actually Need to Know

August 26, 2026 | 23 min

China Employment Law for Foreign-Invested Enterprises: What IT and Ops Leaders Actually Need to Know

A research report on the employment-law exposure a foreign-invested enterprise carries when it employs its own IT staff in mainland China — the September 2025 judicial interpretation, non-competes and trade secrets for technical staff, and what actually has to happen when a systems administrator leaves.

Cover image for Brocent IT blog post: Managed IT Services Pricing Benchmarks: Hong Kong, China, and Singapore (2026)

August 21, 2026 | 23 min

Managed IT Services Pricing Benchmarks: Hong Kong, China, and Singapore (2026)

A research report on what managed IT services actually cost per user per month in Hong Kong, Mainland China and Singapore — built on published, market-specific rate card data, with every source named and every evidence gap flagged rather than filled.

Cover image for Brocent IT blog post: 24/7 IT Support in Singapore for a Shift-Running Plant

August 21, 2026 | 18 min

24/7 IT Support in Singapore for a Shift-Running Plant

A Singapore manufacturer runs three production shifts but wrote its IT contract for business hours only. What genuine 24/7 IT support actually includes versus an informal on-call arrangement, and how to decide what coverage a shift-running plant really needs.

Cover image for Brocent IT blog post: Best IT Support Company in Hong Kong? A Retail Chain's Story

August 08, 2026 | 14 min

Best IT Support Company in Hong Kong? A Retail Chain's Story

How a 9-store Hong Kong retail chain replaced separate POS, network and hardware vendors with one accountable IT partner across every outlet.

Cover image for Brocent IT blog post: IT Support Hong Kong: One Contract for Cross-Border Teams

August 07, 2026 | 15 min

IT Support Hong Kong: One Contract for Cross-Border Teams

How a Hong Kong trading and sourcing company with a Shenzhen satellite team consolidates two IT vendors into one accountable cross-border support contract.

Cover image for Brocent IT blog post: Onsite vs Remote IT Support in Hong Kong: Which Model Fits Your Office?

July 31, 2026 | 14 min

Onsite vs Remote IT Support in Hong Kong: Which Model Fits Your Office?

A practical comparison of onsite, remote, and hybrid IT support models for Hong Kong SMEs - response times, real cost differences, and when physical presence is genuinely required.

Cover image for Brocent IT blog post: IT Hardware Maintenance Services in Asia: Third-Party Maintenance, Multi-Vendor Support & SLAs (2026 Guide)

July 24, 2026 | 14 min

IT Hardware Maintenance Services in Asia: Third-Party Maintenance, Multi-Vendor Support & SLAs (2026 Guide)

A practical 2026 guide to IT hardware maintenance services across Hong Kong, China, Singapore and Malaysia — OEM vs third-party maintenance (TPM), what is covered, SLA tiers, costs and how to choose a provider.

Cover image for Brocent IT blog post: Wi-Fi Site Survey Services in Asia: Ekahau Surveys, 6 GHz Coverage & Costs (2026 Guide)

July 20, 2026 | 14 min

Wi-Fi Site Survey Services in Asia: Ekahau Surveys, 6 GHz Coverage & Costs (2026 Guide)

A practical 2026 guide to professional Wi-Fi site survey services across Hong Kong, China, Singapore and Malaysia — survey types, Ekahau tooling, 6 GHz bands, costs and how to choose a provider.

Cover image for Brocent IT blog post: IT Support SLA Priority Levels Explained: P1, P2, P3 & P4 Response and Resolution Times

July 13, 2026 | 16 min

IT Support SLA Priority Levels Explained: P1, P2, P3 & P4 Response and Resolution Times

A plain-English guide to IT support priority levels — how P1, P2, P3 and P4 are defined, calculated from impact and urgency, and tied to the response and resolution targets in your SLA.

Cover image for Brocent IT blog post: 24/7 Multilingual IT Service Desk in Asia: How Follow-the-Sun Support Really Works (2026 Guide)

July 08, 2026 | 14 min

24/7 Multilingual IT Service Desk in Asia: How Follow-the-Sun Support Really Works (2026 Guide)

What a round-the-clock, multilingual IT service desk actually does, how follow-the-sun coverage works across Asian time zones, in-house vs outsourced economics, SLA tiers, and realistic 2026 costs.