IT support for international schools in Hong Kong has a calendar the rest of the economy does not: everything has to work on the first morning of term, change has to wait for the holidays, and the people whose data you hold are mostly children. Brocent runs the staff helpdesk, the iPad, Chromebook and laptop fleet, Google Workspace for Education or Microsoft 365, and the campus network for international schools, training centres and education groups, from our Kwun Tong office and our Singapore office. Managed IT plans start from HK$195 per user per month in Hong Kong and S$100 in Singapore.
Hong Kong office since 2016: Workshop E, 3/F, Capital Trade Centre, No.62 Tsun Yip Street, Kwun Tong
EssentialsBusiness hours, 8×5 (09:00–18:00 local time), unlimited requests1 hour response / 4 hours remote resolutionOn-site visits bought separately as a token package (2 hours minimum per visit)
BusinessBusiness hours, 8×5, unlimited requests30 minutes response / 2 hours remote resolution1 visit a month included, 2 hours per visit (does not roll over)
Premium24×7, unlimited requests15 minutes response / 1 hour remote resolution2 visits a month included, 2 hours per visit (do not roll over)
P1 and P2 incidents: on-site within 4 business hours, or at a planned time. Project-level SLAs can be agreed separately. Full SLA and priority definitions →
Talk to us
Singapore (headquarters) Brocent Asia Cloud Service Pte. Ltd. 151 Chin Swee Road #14-05, Manhattan House, Singapore 169876 Email: accounts@brocent.com
Hong Kong (since 2016) Brocent Cloud Service (Hong Kong) Workshop E, 3/F, Capital Trade Centre, No.62 Tsun Yip Street, Kwun Tong Phone: (+852) 6741 7227 Email: accounts@brocent.com
01
What IT support for international schools covers
01
Staff and teacher helpdesk
Tickets from teachers, teaching assistants, the admissions office and the bursary, answered in English, Cantonese and Mandarin; how classroom problems are prioritised during lesson time can be agreed in the quote.
iPad carts, Chromebooks, loan laptops and staff MacBooks enrolled in a device management tool chosen for your platform mix, with apps and restrictions set by year group and remote wipe when a device is lost or handed back.
Coverage planned for full classrooms, the library and the exam hall, separate staff, student and guest networks, content filtering, and monitoring of the controller and firewall.
Joiners and leavers handled for staff and students, multi-factor sign-in and conditional access for staff, sharing rules that keep student work inside the school, and licences matched to the people who actually use them.
Mailboxes, shared drives, coursework and on-campus servers backed up outside the platform, and we run restore tests so you know a deleted folder or a lost term's work can come back.
A school cannot postpone the first morning of August or September because a laptop image failed. New teachers arrive in the last week of the holidays and expect a working account, a laptop, a classroom display and a printer code. Returning staff come back to devices that missed two months of updates. Re-imaging carts, renewing certificates, rebuilding a network closet or replacing an aged firewall all have to fit into the same few weeks of the summer break, and anything left unfinished turns into a queue of teachers outside the IT office on day one, which is exactly when the leadership team is watching.
What we do
Summer projects without hiring for the holidays
Cart refreshes, re-imaging, classroom display installs, network closet rebuilds and moves into a new building wing are planned with you in spring and delivered in the break. These can be bought as prepaid IT tokens, so you do not need a separate tender for each small project, and onsite visits follow the minimum booking rules on our token page. Acceptance checks before teachers return, such as a real login, a real display and a real print job in a rebuilt room, can be written into the project scope.
What you receive
Holiday work priced as prepaid IT tokens
Onsite visits booked at a 2-hour minimum per visit
Acceptance checks written into the project scope on request
Student and parent data spread across many systems
An international school holds personal data in the admissions portal, the student information system, the learning platform, the fee and payment system, the library, the cashless canteen card, the bus service, the medical room and email. Each has its own administrator logins, often shared between two or three people. Students graduate, transfer or leave mid-year, and teachers move schools in June. Unless someone closes the accounts in each system and removes access to shared drives and class groups, former staff and students keep working logins long after they leave, and old parent mailing lists keep growing.
What we do
Google Workspace for Education or Microsoft 365, set up once and kept tidy
Many schools run both: Google Classroom for students and Microsoft 365 for the office, or the other way round. We handle joiners and leavers for staff and students, enforce multi-factor sign-in and conditional access for staff and administrators, restrict external sharing of student files, and close leavers each June and at mid-year exits. Whether account creation can be linked to your student information system depends on that system, and we confirm it in the quote. Licences are matched to the people who actually use them.
What you receive
Microsoft 365 or Google user management for joiners and leavers
MFA policy and conditional access (Business plan and above)
Primary sections usually run iPad or Chromebook carts that a class picks up for one lesson and returns, with no single owner. Secondary sections often run a 1:1 programme where families buy or lease a MacBook or Windows laptop that the school still needs to configure. Every device must be enrolled, filtered and assigned to the right year group, and wiped when it is lost on the MTR or returned at the end of the year. Without device management this becomes a spreadsheet, a pile of unnamed chargers and a lot of manual setup in August.
What we do
Device management for carts, 1:1 laptops and staff machines
We enrol school-owned iPads, Macs and Windows laptops in a device management tool chosen for your mix of platforms, handle enrolment, and configure apps, restrictions and Wi-Fi profiles by year group. Lost or returned devices are wiped remotely. How shared carts are reset between classes, how a school profile is applied to 1:1 laptops, and whether the chosen tool also covers your Chromebooks depend on the platforms and licences you already hold, so we confirm them in the written quote. Our device management pricing page compares cross-platform tools with Apple-only ones.
What you receive
Asset register of school devices (Business plan and above)
Enrolment and policies configured in the chosen device management tool
A class of students opening a video at the same moment, a library full of laptops at lunch, and an exam hall running online assessments all hit the same access points. A weak access point, a full DHCP pool or a captive portal that times out stops a lesson, not just a ticket. Classroom displays, wireless casting, the assembly hall sound system and livestreamed concerts add audio-visual problems that land on the same small team, usually at the start of a lesson or five minutes before parents arrive.
What we do
Campus Wi-Fi and network designed for peak load
We start with a Wi-Fi site survey of classrooms, the library, the hall and outdoor areas, then size access points for a full class rather than an empty room. Staff, student, guest and device networks are separated, the firewall carries the content-filtering policy, and the wireless controller is monitored with alerts turned into tickets, so failing access points and full address pools are found early. Guest Wi-Fi for parents and visiting teams gets its own guest portal, kept off the internal network.
Safeguarding, content filtering and children online
Most students are minors, and parents expect the school to filter what children can reach on school devices and school Wi-Fi, to keep chat and file sharing within the school, and to notice when a student account is compromised or used to bully someone. Filtering that is too loose fails safeguarding; filtering that is too strict blocks a teacher's lesson resources and generates a stream of complaints. The settings sit across the firewall, the device management tool and the Google or Microsoft admin console, and they rarely match.
What we do
Campus Wi-Fi and network designed for peak load
We start with a Wi-Fi site survey of classrooms, the library, the hall and outdoor areas, then size access points for a full class rather than an empty room. Staff, student, guest and device networks are separated, the firewall carries the content-filtering policy, and the wireless controller is monitored with alerts turned into tickets, so failing access points and full address pools are found early. Guest Wi-Fi for parents and visiting teams gets its own guest portal, kept off the internal network.
Many international schools and training centres have a single IT coordinator, sometimes with a technician, who also runs AV for assemblies, supports the bursary's finance system and answers parent login questions. When that person is on leave, off sick or buried in a summer project, nobody covers the helpdesk, and admin passwords, warranty records and network diagrams often live only in their head or their personal notebook. Handing over to a new person, or to a provider, then starts with weeks of rediscovery, usually in the middle of term when nobody has time for it.
What we do
A helpdesk that works around the timetable
Teachers and office staff raise tickets through the portal, email, phone, WhatsApp or WeChat, and our Hong Kong team answers in English, Cantonese and Mandarin. Requests are unlimited within your plan's service hours. Which problems count as classroom-critical, such as a display that will not cast or a teacher locked out before a lesson, and how they are prioritised, can be agreed in the quote. Your in-house IT coordinator stays in charge of priorities and local knowledge; we take the queue, the monitoring alerts and the cover when they are away. Plan response times are set out on our SLA page, and project-level targets can be agreed separately.
What you receive
Service desk with unlimited requests in your plan's hours
Monthly report on tickets, assets and patches
Tasks that stay with your in-house IT agreed in writing
Essentials HK$195 · Business HK$295 · Premium HK$430
EssentialsRemote support in business hours · HK$195 / S$100 per user
Desk
Business hours, 8×5 (09:00–18:00 local time), unlimited requests
Response
1 hour response / 4 hours remote resolution
Devices
RMM monitoring, patching, antivirus status checks
Identity
Microsoft 365 / Google user management (joiners and leavers)
On-site
On-site visits bought separately as a token package (2 hours minimum per visit)
Reports
Monthly report: tickets, assets, patches
People
Shared service desk
BusinessSecurity tooling, an account manager and on-site visits · HK$295 / S$150 per user
Desk
Business hours, 8×5, unlimited requests
Response
30 minutes response / 2 hours remote resolution
Devices
Essentials, plus managed EDR and cloud backup (50 GB per user)
Identity
Essentials, plus MFA policy and conditional access
On-site
1 visit a month included, 2 hours per visit (does not roll over)
Reports
Essentials, plus quarterly review and asset register
People
Shared service desk, plus account manager
Premium24×7 cover and a named desk agent · HK$430 / S$220 per user
Desk
24×7, unlimited requests
Response
15 minutes response / 1 hour remote resolution
Devices
Business, plus MDR, managed firewall, DMARC and email security
Identity
Business, plus privileged account management
On-site
2 visits a month included, 2 hours per visit (do not roll over)
Reports
Business, plus multi-country head-office summary, compliance mapping (ISO 27001 / DPDP / APPI / GDPR) and vCIO annual roadmap
People
Account manager, plus named service desk agent
Wording is taken from the home-page plan table. Project-level SLAs can be agreed separately. SLA · Price assumptions
A school IT year: what has to happen before term, during exams and in the holidays
School IT runs on the academic calendar, so the useful way to plan it is by term rather than by month. In Hong Kong most international schools break for summer from June to August, with shorter breaks around Chinese New Year and Easter; in Singapore the calendar depends on whether the school follows a northern-hemisphere year or the local one. Each break is a window for work that cannot happen while lessons run.
Spring is for planning. We agree with your IT coordinator which carts and staff laptops reach end of life, which classrooms get new displays, whether a network closet or the firewall needs replacing, and what the admissions office expects for new families. Hardware orders go in early because summer shipping into Hong Kong is slow and the same models are in demand from every school.
The summer break is for build and test. Devices are wiped and re-enrolled by year group, Wi-Fi changes are made and checked again, and new staff accounts are created from the HR list so they exist before teachers arrive. In the last week a walk through the timetable is worth doing: a classroom display in each building, printing from a new laptop, a student logging into a cart iPad, and the exam hall network under load. These checks can be written into the holiday project scope.
During term, change slows down. Updates go out in stages, outside lesson time, and anything that could affect a classroom is best scheduled for a weekend or a half-term. Many schools also freeze changes to the exam hall and the network that serves it during exam weeks. June closes the loop: leavers are closed, loan devices are collected and wiped, and the next year's plan starts from the asset register rather than from memory.
How to choose an IT support provider for an international school
Schools usually buy IT support through a short tender run by the bursar or business manager with the head of digital learning. A useful buying list is shorter than most tenders and closer to how the school actually works.
First, ask how the provider handles the calendar: who is available in the last week of August, how changes are handled during exams, and how holiday projects are priced. A provider that only quotes a monthly fee and leaves summer work to a separate quotation will cost more than it looks. Second, ask which platforms they manage day to day. Apple, Google and Microsoft each bring their own management console for iPads, Chromebooks and staff laptops, and one tool for everything is rare, so ask which tool the provider proposes for each platform and put the answer in writing.
Third, ask how they treat student data. The answer should name specific controls, such as multi-factor sign-in for admin accounts, sharing limits on student drives, leaver closure dates and backup restore tests, and it should include a written data-processing clause that your adviser can review. Fourth, ask how they work with your own IT staff. Good arrangements spell out who owns which tasks, who holds admin passwords and how out-of-hours alerts are escalated.
Finally, ask for something concrete before signing: an inventory template, a sample monthly report and a draft handover plan. If a provider cannot show you what you will receive each month, you will not be able to tell whether you are getting it. You can compare our plans on the pricing page and read how response times are defined on our SLA page before you shortlist anyone.
What decides the cost of IT support for a school
Our managed IT plans are priced per user per month, starting from HK$195 in Hong Kong and S$100 in Singapore. For a school the main question is who counts as a user. Staff who receive helpdesk support, a managed laptop and a monitored account are users. Students on shared carts usually are not counted one by one; the carts are covered as managed devices, and student accounts are covered as part of the platform administration. We write down the basis in the quote, so the price does not change when enrolment rises by a class.
The second factor is the plan level. Essentials suits a small training centre that needs a weekday helpdesk and remote fixes. Business adds security tools, an account manager and one onsite visit a month, which most single-campus schools need. Premium adds round-the-clock cover and two onsite visits a month, which suits schools with boarding houses, weekend programmes or several campuses. The plan details are on our homepage and the price assumptions page explains what each figure includes.
The third factor is project work. Summer refreshes, Wi-Fi upgrades and new-building moves vary each year, so we price them as prepaid IT tokens rather than build them into the monthly fee. Licences for Google Workspace for Education, Microsoft 365 A plans, device management and backup are listed separately on their own pricing pages, so you can see what is software and what is service.
Use the calculator on our homepage for a first estimate, then we confirm it in a written quote after an inventory of your staff, devices and sites.
Hong Kong and Singapore schools: what differs, and how training centres fit
Hong Kong schools work under the Personal Data (Privacy) Ordinance, Cap. 486, and many follow the Education Bureau's guidance on information security in schools even when they are not in the public sector. Singapore schools work under the Personal Data Protection Act 2012 and the PDPC's advisory guidelines for the education sector and for children's data, which are more detailed about what schools are expected to do. Singapore also has a mandatory data breach notification duty under the PDPA; your adviser should confirm how it applies to you.
Day to day, the differences are smaller than the rules suggest. Both markets have families who expect a school app and instant replies, both use the same mix of Apple, Google and Microsoft platforms, and both have small IT teams. The practical differences are logistics: engineers come from our Kwun Tong office for Hong Kong campuses and from our Singapore office for Singapore campuses, and hardware lead times and holiday dates differ.
Training centres, tutoring groups and language schools look different again. They often run several small sites in shopping centres or office buildings, a shared front-desk computer at each, online classes over Zoom or Teams, and card payments at reception. Their risks are a shared password on the front-desk PC, parent contact lists in personal phones and Wi-Fi shared with the building. The same plans apply, usually at the Essentials or Business level, with one standard setup copied to each site.
Education groups with campuses in several countries can keep one helpdesk and one reporting format across Hong Kong, Singapore and other markets, because we operate through 11 local legal entities and deliver in 100+ countries and regions.
05
The first 30 days
Inventory and access
We list staff, devices, carts, network equipment, admin accounts and licences, collect documentation from your current provider or IT coordinator, and record everything in the configuration management database (CMDB) on our IT management platform.
Risk check and plan
An IT audit checks multi-factor sign-in, leaver accounts, backups, filtering and Wi-Fi coverage. The findings separate fixes for this term from work for the next holiday.
Handover on a quiet date
We agree a handover date away from term start and exam weeks and take over the helpdesk queue and monitoring. Our engineers can shadow your current provider or IT coordinator before taking over.
First report and holiday plan
After the first month you receive the monthly report on tickets, assets and patches, and we agree the summer or next-break project list with your IT coordinator and bursar.
06
Verifiable delivery: adjacent sectors
We have no signed contract in this sector that we can publish yet. The signed contracts below are from adjacent sectors; they show the same delivery methods (resident engineers, multi-site on-site visits, network installation). They are not case studies from this sector.
Adjacent sector
Adjacent sector: a global medical device company — on-site support across many sites
A medical device company, not a school. It shows multi-site field engineering: L1 end-user on-site support for 30-plus sites in more than 20 cities, the model a school group with several campuses would use.
Client type: medical device company
Service: on-site L1 end-user support (FSE)
Region: mainland China, 30+ sites in 20+ cities
Term: since 2024, current contract runs to 2027
Adjacent sector
Adjacent sector: a global pharmaceutical company — resident desk support across Asia
A pharmaceutical company, not a school. It shows resident engineers placed full-time or part-time three days a week, which is how a school IT office can add hands on site without hiring another permanent post.
Client type: pharmaceutical company
Service: full-time and part-time resident engineers (FTE / PTE)
Region: Hong Kong, Taiwan, South Korea, mainland China; briefly two offices in Europe in 2025
Term: since 2023, current contract runs to 2028
Adjacent sector
Adjacent sector: a German industrial manufacturer — campus network and wireless build across China
A manufacturer, not a school. It shows campus-scale network work: structured cabling, wireless simulation and multi-vendor deployment across several sites, the kind of build a school needs for classroom and boarding Wi-Fi.
Structured cabling, wireless simulation, and power estimation
We implement the controls and keep the evidence; legal interpretation stays with your own adviser.
Cap. 486
Hong Kong: Personal Data (Privacy) Ordinance, Cap. 486
Data Protection Principle 4 requires all practicable steps to protect personal data against unauthorised access, and DPP2(3) and DPP4(2) require a school that uses an IT contractor to adopt contractual or other means to prevent unauthorised access and over-retention. We put access control, encryption and leaver procedures in place and keep the records. We implement the controls and keep the evidence; legal interpretation stays with your adviser.
Hong Kong: PCPD guidance to schools on staff and student data
When schools resumed classes in September 2020 the Privacy Commissioner published guidance for schools on collecting and using personal data of teachers, staff and students. It asks schools to collect only what is necessary, to give a Personal Information Collection Statement and to use data only for its original purpose. On the IT side, access control and leaver procedures support this. We implement the controls and keep the evidence; legal interpretation stays with your adviser.
Hong Kong: Education Bureau, Information Security in Schools – Recommended Practice
The EDB's recommended practice covers security management, incident handling, backup, network and communication security, websites, mobile devices and malware protection, and points schools to HKCERT for incident help. It is guidance, not law, and international schools are not obliged to adopt it, but it is a useful checklist. We map the controls we run to its chapters and keep the evidence for your review; legal interpretation stays with your adviser.
Singapore: Personal Data Protection Act 2012 and PDPC education guidelines
Section 24 of the PDPA requires reasonable security arrangements, and the Act includes a mandatory data breach notification duty. The PDPC's Advisory Guidelines for the Education Sector and its Advisory Guidelines on the PDPA for Children's Personal Data in the Digital Environment explain how these apply to schools and services used by children. We implement the technical controls and keep the evidence; legal interpretation stays with your adviser.
IT support for international schools in Hong Kong: questions buyers ask
14 of 14 questions
No question matches. Try another word.
How much does IT support for an international school in Hong Kong cost?
Managed IT plans are priced per user per month and start from HK$195 in Hong Kong and S$100 in Singapore. Staff who receive support and a managed laptop count as users; student carts are usually covered as managed devices rather than one user per student. We write the counting basis into the quote. Summer refreshes and Wi-Fi upgrades are priced separately as IT tokens, and licences are listed on their own pricing pages.
Can you work alongside our own IT coordinator or technician?
Yes, and most schools keep one. Your coordinator stays responsible for priorities, teaching technology choices and local knowledge. We take the helpdesk queue, device management, monitoring, backups and cover during leave, and we agree in writing which tasks stay with your team, who holds which admin password and how alerts are escalated.
Can you manage large numbers of student and staff devices?
Yes. School-owned iPads, Macs and Windows laptops are enrolled in a device management tool chosen for your platform mix, with apps, restrictions and Wi-Fi profiles set by year group, and lost or returned devices are wiped remotely. How shared carts are reset between classes and whether the tool also covers Chromebooks depend on the platforms and licences you hold, so we confirm them in the written quote.
Can you support both Microsoft 365 and Google Workspace for Education?
Yes. Many schools use Google Classroom with students and Microsoft 365 in the office, or the reverse. We handle joiners and leavers on both platforms, enforce multi-factor sign-in for staff, limit external sharing of student files and close leavers on agreed dates. We also check that Microsoft 365 A licences or your Google Workspace for Education edition are assigned to the people who actually use them.
How do you handle IT support across several school campuses?
Each campus gets the same baseline: the same device policies, Wi-Fi design rules, filtering policy and backup scope, so a teacher who moves between sites sees the same setup. Tickets go into one queue with the campus recorded and onsite visits are booked per site. If the bursar wants the monthly report split by campus, that can be agreed in the quote.
What response times do you offer for school IT support?
Essentials covers weekdays 8x5 with a one-hour response and four-hour remote resolution; Business covers weekdays 8x5 with a 30-minute response, two-hour remote resolution and one onsite visit a month of two hours; Premium covers 7x24 with a 15-minute response, one-hour remote resolution and two onsite visits a month. Project-level SLAs can be agreed separately; full definitions are on our SLA page.
How do you protect student data in Hong Kong under the PDPO?
We apply the controls PDPO DPP4 expects in practice: multi-factor sign-in for staff and administrators, least-privilege access to the student information system, encrypted laptops, sharing limits on student drives, leaver closure dates and backups with restore tests. DPP2(3) and DPP4(2) expect a school to bind its IT contractor by contract or other means; the data protection terms for our role can be agreed in the quote. We keep the evidence; legal interpretation stays with your adviser.
Can you set up content filtering for students on campus and at home?
Yes. Filtering is applied on the campus firewall for the student network and, where the device management tool supports it, through profiles on school-owned devices, so it can follow a laptop or iPad home. Categories and exceptions are agreed with your safeguarding lead, and how teachers ask for a blocked teaching resource to be reviewed can be set out in the quote.
Can you upgrade our network and devices during the summer holidays?
Yes. We plan the work with you in spring, order hardware early, and complete re-imaging, Wi-Fi changes, display installs and network closet work during the break. Checks before term, such as displays, printing, cart logins and the exam hall network, can be written into the project scope. Holiday projects are usually bought as prepaid IT tokens.
How do you keep Wi-Fi stable during exams and online assessments?
We survey the exam hall and library for full occupancy, and the controller is monitored so a failing access point is flagged early. Reserving address space for exam devices and pausing changes to that part of the network during exam weeks can be agreed with you. During agreed exam sessions an engineer can be onsite under the plan's onsite visits or as a token booking.
Are schools eligible for Microsoft's nonprofit offers?
No. Microsoft's nonprofit programme excludes schools and universities, which use education licensing instead. Microsoft 365 A plans and Google Workspace for Education editions are bought through education channels, and we can help you check which edition fits your staff and students before renewal.
Do you also support training centres, tutoring centres and language schools?
Yes. Training centres usually run several small sites with a shared front-desk computer, online classes on Zoom or Teams and card payments at reception. We recommend one standard setup copied to each site, named accounts instead of a shared password, and the centre's Wi-Fi kept separate from the building's, and we cover the helpdesk under the Essentials or Business plan.
How long does it take to take over IT support from our current provider?
We start with an IT audit and an inventory of accounts, devices, network equipment and admin passwords, then agree a handover date away from term start and exam weeks. The timeline depends on how complete the current documentation is. You see the plan before anything changes, and our engineers can shadow your current provider or IT coordinator before taking over.
Do you support the classroom AV and assembly hall systems?
We support classroom displays, wireless casting, document cameras and meeting-room video as part of the helpdesk, and we cover the network those devices rely on. Larger hall sound and stage systems usually stay with your AV contractor; we agree where our responsibility ends and work with them on network and casting issues.
15+ years leading Brocent's global IT service delivery from Beijing and Singapore; hands-on in network, hybrid cloud, managed IT and information security and compliance.