What IT support does a 10-person, cloud-based business actually need?

A ten-person business on cloud systems with company-supplied devices needs five things: identity security with multi-factor authentication everywhere, managed and updated devices, backups of the cloud data itself, a service desk staff will actually ring, and someone watching for trouble. What it does not need is a server, an IT hire, or an enterprise contract.

This profile is quietly becoming the standard Australian small business: no server room, Microsoft 365 or Google for the office, a cloud system for the core work, laptops the company bought. The trap in it is the sentence owners say with relief: we are in the cloud, so IT is sorted. Half true. The platforms keep their side running; your identities, your devices, your data and your configuration remain entirely yours to secure, and nobody at Microsoft is watching your logins. The shared-responsibility split is written into every platform agreement nobody reads: the provider secures the service, the customer secures their use of it, and every gap in this article lives on the customer's side of that line.

The five needs, concretely. Identity first, because at this profile nearly every attack is a login: multi-factor authentication on every account, access matched to roles, and departures removed the same day, all managed through Entra ID. Devices second: every laptop enrolled in Intune, encrypted, patched, and wipeable the day one is left in an airport. Data third: the cloud data itself backed up, because platforms do not protect you from deletion, account compromise or retention gaps; tools such as Veeam exist for exactly this. Fourth, a service desk with humans, because staff who cannot get help invent workarounds, and workarounds are where both productivity and security leak. Fifth, monitoring, because every one of the above fails silently.

Growth is the reason to set this up properly at ten rather than twenty. The expensive thing about doubling headcount is not the new laptops; it is inconsistency, ten machines set up ten ways, access granted ad hoc, nobody sure which apps are official. A one-page standard now, how a new starter is set up, what the approved app list is, who approves access, makes every future hire boring, and boring is the goal. The standard protects you at departure time too, because offboarding a person from ten documented systems is a checklist, and from ten mysteries it is an investigation.

Just as useful is the list you can skip. No server: your workloads are already in the cloud, and buying hardware now would be nostalgia. No full-time IT hire: the workload at ten people is real but fractional, which is precisely what a per-user plan is for. No enterprise security stack: the Essential Eight basics, done properly, are the appropriate ambition. And no long lock-in contracts; a provider confident in their service does not need one. The savings from skipping all of it fund the five needs several times over.

The cost shape is simple at this size. Per-user plans mean ten users times a published number: ours run $79 to $199 per user per month depending on the Essential Eight tier, everything above included, and the multiplication is something you can do in your head before ever talking to anyone. That transparency is the standard worth demanding from whoever you shortlist: if the price needs a meeting, ask yourself what else will.

Businesses exactly like this are who we have looked after since 2006, from our service desk in Adelaide, and the pattern holds across industries: the tools change, the five needs do not. A local desk matters more at this size than owners expect, because with no internal IT person, the provider is the IT department, and staff use help that feels close. At this size, support is not a department you have; it is a phone number you trust.

The honest caveat: if your business runs specialist software tied to a local server, design tools, a legacy ERP, clinical systems, you are not quite this profile, and the cloud-only advice above needs a different article's worth of care. But if the description in the first paragraph is you, the whole setup is a solved problem, and solving it now, at ten people, is a fraction of the cost of untangling it at thirty.