Brightside is a UK‑based charity operating as a fully cloud‑first organisation. The team supports its work through remote collaboration using Microsoft 365, without reliance on on‑premise infrastructure. As a small nonprofit with staff and trustees, Brightside requires proportionate, well‑governed IT services that support its mission without unnecessary cost or complexity.
Brightside reviewed its IT support arrangements ahead of renewing with its incumbent provider to ensure the service remained transparent, cost‑effective, and appropriate for a small nonprofit. The charity wanted to simplify its Microsoft 365 licensing, remove legacy services such as an off‑site hosted remote desktop environment, and slightly improve security beyond the baseline required for Cyber Essentials Plus.
The existing setup included mixed Microsoft 365 licences, third‑party patching and antivirus tooling, and separate remote support software. While the organisation had successfully achieved Cyber Essentials Plus for three consecutive years, it required clearer oversight of patching, identity security, and user administration without introducing heavy device management or 24/7 monitoring. Brightside also needed a responsive, partner‑style support relationship that focused on core services, avoided unnecessary add‑ons, and maintained Business Basic licensing for trustees.
Qlic IT proposed a streamlined managed support model designed specifically for small, cloud‑based charities. The approach focused on delivering clarity, value, and compliance without overengineering the environment. We began with a light‑touch technical review of the Microsoft 365 tenant, licensing structure, and security controls to identify opportunities to simplify and standardise.
Microsoft 365 administration was central to the solution, covering user onboarding and offboarding, licence management, and day‑to‑day support for Teams, SharePoint, Outlook, and OneDrive. We rationalised licensing by aligning staff to appropriate Microsoft 365 plans while ensuring trustees remained on Business Basic, avoiding unnecessary upgrades or cost increases. Legacy licences and the previously hosted remote desktop service were reviewed, with a planned discussion around decommissioning and any required data migration to SharePoint.
From a security perspective, we implemented Microsoft Intune Mobile Application Management rather than full device management. This enabled app protection policies and conditional access to safeguard organisational data on Brightside‑owned laptops while remaining proportionate to risk. Monthly patching oversight was introduced to support Cyber Essentials Plus compliance, working alongside the existing antivirus and patching tools.
Optional, lightweight Microsoft 365 backup was made available for key mailboxes and SharePoint data, providing resilience without a full enterprise backup platform. Remote helpdesk support replaced standalone tools such as TeamViewer, offering consistent assistance through a single provider. Cybersecurity awareness training was included through Bigger Brains Training, supporting user knowledge without adding operational burden.
Brightside achieved a simpler, more transparent IT support arrangement aligned to its size and charitable mission. Microsoft 365 licensing became easier to manage, with clear separation between staff and trustee requirements and the removal of legacy complexity. The planned retirement of the hosted remote desktop service reduced unnecessary cost and technical overhead while ensuring data was retained within SharePoint.
Security was strengthened in a controlled and proportionate way. Intune app protection and conditional access improved protection of organisational data without the disruption of full device enrolment. Structured patching oversight supported ongoing Cyber Essentials Plus compliance and provided clearer assurance for trustees and stakeholders.
Day‑to‑day support became more reliable and consistent, with responsive remote assistance and a clear scope focused on what the organisation actually needed. Optional backups added peace of mind for critical data, while cybersecurity training improved user awareness. Overall, Brightside gained a partne
- Simplified Microsoft 365 licensing with trustees retained on Business Basic
- Clearer oversight of patching and security for Cyber Essentials Plus compliance
- Proportionate security using Intune Mobile Application Management and conditional acces
- Reduced complexity through planned decommissioning of legacy remote desktop services
- Reliable remote helpdesk support without standalone tools or inflated costs
- Optional, lightweight backup protection for key Microsoft 365 data
- Included cybersecurity awareness training via Bigger Brains
