Somebody finally read the invoice
A forty-person nonprofit was paying for enterprise Microsoft licensing and nobody could say why. Someone picked the plan years earlier, the invoices kept coming, and everyone assumed enterprise meant safer. I audited what they actually used. They were on Office 365 E3 at roughly nine dollars a seat, and here is the part nobody caught: that enterprise plan did not include endpoint protection or email threat defense at all. They had been paying enterprise prices for a plan that left the front door open. I moved all forty seats to Business Premium at five-fifty nonprofit pricing. It covered every workload they had and added the security their enterprise plan never included: Defender EDR, Safe Links and Safe Attachments, Conditional Access. Ten seats were free under Microsoft's nonprofit grant, so they were paying for thirty. They went from about forty-three hundred dollars a year to roughly two thousand. Less money, and protected for the first time. That is what happens when someone reads the invoice with your interests in mind instead of the vendor's.