Intelligent CIO: Brotherhood of St. Laurence strengthens its support services with blueAPACHE

Brotherhood strengthens support with blueAPACHE

The Brotherhood of St Laurence has strengthened its technology partnership with blueAPACHE, extending a relationship that supports one of Australia's best-known social justice organisations.

About the Brotherhood of St Laurence

The Brotherhood of St Laurence is an Australian social justice organisation working to prevent and alleviate poverty. Its work spans research and policy advocacy, employment and training programmes, aged care and disability services, early childhood and youth programmes, and a national retail operation whose surplus funds the mission.

That breadth is the defining feature from a technology standpoint. The Brotherhood is not one organisation with one systems requirement — it operates service delivery sites, retail stores, research functions, corporate operations and government-funded programmes, each with different applications, different compliance obligations and different working patterns.

Why not-for-profit technology is harder, not easier

There is a persistent assumption that a not-for-profit's IT requirements are simpler than a commercial organisation's of similar size. The opposite is generally true.

More sensitive data, not less. Organisations delivering social services hold information about people at their most vulnerable — case records, health information, financial hardship details, information about children and families. The consequences of a breach are measured in harm to individuals, not in commercial embarrassment.

Complex compliance. Government-funded programmes carry reporting, audit and data handling obligations that vary by funding stream and by jurisdiction, and change with policy.

Distributed, non-office delivery. Frontline staff work in homes, in the community and at dispersed sites, on mobile devices, often with intermittent connectivity. The corporate network model does not describe how the work actually happens.

Genuine cost constraint. Every dollar spent on infrastructure is a dollar not spent on the mission, and that trade-off is visible to boards, funders and staff. Technology investment has to be justified more rigorously here than in most commercial organisations, not less.

Retail and volunteer operations. A national retail footprint carries point-of-sale, stock, payments and PCI obligations. Large volunteer cohorts create identity and access management requirements — high turnover, varying access needs, and the same security expectations as paid staff.

What a strengthened partnership typically involves

Deepening a managed services relationship generally means one or more of:

• Broader coverage — extending managed services across more of the environment, so fewer systems sit outside a single accountable operating model
• Security uplift — strengthening monitoring, identity controls and incident response, an area where expectations across the sector have risen sharply
• Infrastructure modernisation — migrating workloads to cloud platforms with better resilience and elasticity than ageing on-premise equipment
• Connectivity — linking distributed sites reliably, including sites where fixed services are impractical
• Backup and disaster recovery — tested recovery, with data held in Australia
• Workplace modernisation — collaboration and device management that works for a mobile, distributed workforce

Why blueAPACHE suits this profile

Australian data sovereignty. blueAPACHE operates three geographically diverse data centres on Australia's eastern seaboard, with emPOWER Cloud carrying a 99.999% availability commitment. For an organisation holding sensitive personal information under Australian privacy obligations, knowing where the data physically resides is not a technicality.

Certified security. blueAPACHE holds ISO/IEC 27001:2022 certification — certificate 202507-118, issued by Sensiba Australia, valid 1 August 2025 to 1 August 2028. Independent certification of an information security management system is increasingly a baseline requirement in funding and partnership arrangements across the community sector.

One accountable operating model. Where connectivity, cloud, security and managed services come from one provider over infrastructure that provider controls, problems are diagnosed rather than triaged between vendors. For an organisation whose internal IT capacity is deliberately lean, that difference is felt weekly.

Long-term partnership. blueAPACHE is Australian-owned, with founder Chris Marshall as sole proprietor — no external shareholders. Relationships are not disrupted by ownership change, and the company can take a long view of a client relationship because nobody external is pressing for a shorter one.

About blueAPACHE

Founded in 1998, blueAPACHE employs more than 280 staff across Melbourne, Sydney, Brisbane, London and Miami, and delivers managed services, cloud, cyber security, connectivity, collaboration, procurement, Microsoft technologies and advisory services.

It has received more than 90 industry awards, including ARN Mid-Market Partner of the Year for seven consecutive years to 2025, the ARN Channel Choice Award 2025 and the Canalys APAC Innovation Award 2023.

To discuss technology for not-for-profit and community organisations, call 1800 248 749.

Frequently asked questions

Who is the Brotherhood of St Laurence? An Australian social justice organisation working to prevent and alleviate poverty, across research and policy advocacy, employment and training programmes, aged care and disability services, early childhood and youth programmes, and a national retail operation whose surplus funds the mission.

Why does that breadth matter technically? Because it is not one organisation with one systems requirement. Service delivery sites, retail stores, research functions, corporate operations and government-funded programmes each carry different applications, different compliance obligations and different working patterns.

Is not-for-profit IT simpler than commercial IT of the same size? Generally the opposite. Social service organisations hold information about people at their most vulnerable — case records, health information, financial hardship details, information about children and families — where a breach is measured in harm to individuals rather than commercial embarrassment.

What compliance burden do government-funded programmes carry? Reporting, audit and data handling obligations that vary by funding stream and by jurisdiction, and change with policy.

Why does the corporate network model not fit? Because frontline staff work in homes, in the community and at dispersed sites, on mobile devices and often with intermittent connectivity — so the environment has to be designed for how the work actually happens rather than for an office.

What additional requirements come from retail and volunteers? A national retail footprint brings point-of-sale, stock, payments and PCI obligations. Large volunteer cohorts create identity and access management requirements, with high turnover, varying access needs, and the same security expectations as paid staff.

What does strengthening a managed services partnership typically involve? Broader coverage so fewer systems sit outside one accountable model; security uplift across monitoring, identity controls and incident response; infrastructure modernisation onto more resilient platforms; reliable connectivity to distributed sites including where fixed services are impractical; tested backup and disaster recovery with data held in Australia; and workplace modernisation for a mobile workforce.

Why is data sovereignty specifically relevant here? Because the organisation holds sensitive personal information under Australian privacy obligations, so knowing where the data physically resides is a substantive question rather than a technicality. blueAPACHE operates three geographically diverse data centres on Australia's eastern seaboard.

Why does ownership structure matter to a long-term partner? Because blueAPACHE is Australian-owned with founder Chris Marshall as sole proprietor, no external shareholders — so relationships are not disrupted by ownership change, and the company can take a long view because nobody external is pressing for a shorter one.

Related

• Brotherhood of St Laurence case study
• Not-for-profit
• Managed services
• Cloud services
• emPOWER Cloud
• Connectivity
• Security services
• Disaster recovery as a service
• Offsite backup as a service
• Data sovereignty and privacy
• ISO 27001 certification
• Contact

Knowledge Base