Finding Hidden Duplication in a Small Business IT Bill

IT costs tend to grow gradually. A service gets added here, a licence is upgraded there, and a security product appears at renewal. Several years later, nobody necessarily goes back and asks whether those products still make sense together — or whether the technology already being paid for is actually being used.

The Problem

A small business asked us to review its existing IT costs. Its monthly IT bill had gradually grown and nobody was entirely sure what every service was providing. The proposal under review contained separate charges covering: managed IT support, antivirus and endpoint security protection, Microsoft 365 Business Premium licences, DNS protection, cloud backup, hardware configuration, delivery and additional engineering work.

None of those services is inherently unreasonable. The question was whether the customer needed all of them and whether some of the services were overlapping.

Our Investigation

Instead of simply comparing the headline monthly support price, we reviewed the proposal line by line. One area immediately required further explanation.

The business was already paying for Microsoft 365 Business Premium while also being charged separately for endpoint antivirus and security protection. Microsoft 365 Business Premium includes Microsoft Defender for Business as part of its security capabilities.

That didn't automatically mean the additional security product was unnecessary — a third-party endpoint security platform may provide additional functionality or form part of a provider's wider managed security service. But there should be a clear answer to a basic question: what additional protection or service is the customer receiving for that extra charge? If an IT provider cannot explain what one security product adds over another, the customer may simply be paying for overlapping technology.

What We Found

• Microsoft 365 Business Premium already includes significant security functionality — any separate endpoint security product should be justified by what it adds beyond that.
• Premium Microsoft 365 capabilities (multi-factor authentication, anti-phishing, device management) still need to be correctly configured to deliver their value.
• The backup service needed clearer scope — which data and Microsoft 365 workloads were actually protected?
• The DNS protection service needed explanation of what it provided and whether it overlapped with other licensed security tools.
• If managed support was already covered by the monthly fee, should routine hardware setup attract a separate engineering charge?
• Every recurring charge should have a clear technical or business purpose that the customer can understand and verify.

The Bigger Issue: Were the Existing Licences Being Used?

The potential licensing overlap wasn't actually the most important issue. Microsoft 365 Business Premium provides much more than Office applications. Its capabilities include security, identity and device-management features. But these features still need to be configured correctly to deliver their value.

We recommended reviewing whether the customer was actually benefiting from the security capabilities already being paid for. Areas to examine included: multi-factor authentication, endpoint security via Microsoft Defender for Business, anti-phishing protection, Safe Links and Safe Attachments, device management and compliance policies, identity and access controls, and appropriate security baseline configurations.

A premium licence without appropriate configuration can represent both wasted money and a false sense of security.

Looking Beyond Security Licensing

We also reviewed the smaller charges making up the overall IT bill. Key questions: if managed support is already included in the monthly fee, should routine hardware setup attract a separate engineering charge? What exactly does the backup service cover — which data, which Microsoft 365 workloads, and what are the recovery options? What does the DNS protection service provide, and how does it relate to the security capabilities within Microsoft 365? What is explicitly included within the core monthly support fee versus what is billed as additional project work?

Not every additional charge was necessarily wrong. The purpose of the review was to make sure every charge had a clear reason — and that the customer could understand and verify what they were receiving for each part of the bill.

Our Recommendation

We recommended that the business challenge areas where costs appeared to overlap and, importantly, ask for evidence of what had actually been configured. The conversation therefore moved away from "How much does our IT support cost?" towards "What exactly are we receiving for each part of the bill?" That is a much more useful question.

The Result

The review identified areas where the customer could challenge its existing supplier and potentially recover or remove unnecessary expenditure. More importantly, it provided the customer with a clearer framework for assessing its IT arrangements: what each service delivered, whether services overlapped, whether Microsoft 365 security features had actually been configured, whether additional products provided measurable value, and what was and wasn't included within the support agreement.

Why This Matters

Small businesses often accumulate IT services gradually. Several years later, nobody necessarily goes back and asks whether those products still make sense together. At Altitude IT Support, an IT review looks at both cost and capability.

For businesses across Manchester, Greater Manchester and the wider North West, we provide independent business IT support and Microsoft 365 reviews that go beyond the headline price — examining what you're actually using and where there may be gaps, unnecessary overlap or misconfigured security settings.

IT value isn't about how many products appear on an invoice. It's about whether each service has a purpose, is configured properly and contributes to the security or operation of the business.