How Much Should a Small Business Spend on IT and Security?

Some links on this page are affiliate links: if you sign up or buy through them, Dacros may earn a commission, at no extra cost to you. We only recommend tools we use and rate. Full disclosure.

There is no magic number, but there is a method

Every small-business owner wants the same thing from their IT budget: to spend enough to be safe and productive, but not a penny more than needed. The trouble is that “how much should I spend on IT?” has no single answer. A solicitor holding sensitive client files has very different needs from a two-person landscaping business.

So rather than chase a magic percentage of turnover, it is far more useful to build your budget from the parts that actually make it up. Once you can see the categories, you can decide what each one is worth to your business — and where it is safe to economise and where it really is not.

The main categories of IT spend

Devices and hardware

This is the kit your team actually uses: laptops, desktops, monitors, phones and tablets, plus any shared equipment like a printer or a small server. Hardware is often a lumpy, occasional cost rather than a monthly one, so it helps to plan for it. A reasonable rule of thumb is that a business computer lasts three to five years before it is slow enough to cost you real time. Setting aside a little each month towards replacements stops you facing a nasty bill all at once.

Software and subscriptions

Most software is now a monthly or yearly subscription rather than a one-off purchase. The big one for many firms is Microsoft 365 or Google Workspace for email, documents and file storage, but the list adds up: accounting software, your industry tools, your website, and so on. It is worth reviewing this list once a year — subscriptions have a habit of quietly renewing for things nobody uses any more.

Connectivity and phones

Your broadband and phone system are easy to take for granted until they stop. Business-grade broadband, and increasingly a modern internet-based phone system, belong in the budget as steady monthly costs. If you are still on an ageing phone line, moving to a VoIP system can lower the bill and add features at the same time — our explainer on business VoIP phone systems covers what changes.

Security

This is the category most often underfunded, and the one that hurts most when it is. It covers the tools and habits that keep you out of trouble: anti-malware protection, multi-factor authentication, staff training against phishing, and secure ways to handle email and passwords. A good deal of this is inexpensive relative to what it prevents. A bundle like Proton — secure email, a password manager and a VPN — is a modest monthly cost that covers several bases at once. If you take security seriously enough to certify it, our page on Cyber Essentials explained is a good next read.

Backups and recovery

Backups deserve their own line because they are the thing that saves you when everything else fails — a ransomware attack, a flood, a dropped laptop, a simple mistake. Reliable, tested backups are cheap insurance, and the cost of not having them can be your whole business. Our guide to the 3-2-1 backup approach explains a simple, robust setup.

Support and maintenance

Finally, someone has to keep it all running: applying updates, fixing what breaks, answering the “why won’t this print” questions, and watching for problems before they grow. You can pay for this as you go, or as a predictable monthly service. More on that choice below.

Value versus cost: how to think about it

It is tempting to judge IT by the size of the invoice. The better question is what the money prevents.

The cheapest IT is the kind that quietly stops problems happening — and that almost never comes from spending as little as possible. Consider a single day of downtime: staff sitting idle, customers unable to reach you, orders not going out. For most firms that costs far more than a month of proper support. Spending a little to make that day rare is not a cost, it is a saving you never see on paper.

That is the mindset shift. A slightly higher, steady spend that keeps things maintained, backed up and secure usually beats a low spend that leaves you exposed to occasional disasters. You are buying fewer bad days.

Pay-as-you-go or a fixed monthly cost?

Many small firms start out fixing IT reactively — call someone when something breaks, pay the bill, move on. It feels frugal, but it has real downsides: the bills are unpredictable, fixes are slower because nobody knows your setup, and crucially, nobody is doing the prevention that stops problems in the first place.

A managed arrangement — a fixed monthly fee for support and maintenance — trades that unpredictability for a known cost and someone keeping an eye on things. For a budget, predictable is valuable in itself: you can plan around it. Our overview of what managed IT support involves explains how this works in practice, and you can see typical costs on our pricing page.

A simple way to build your number

If you want a starting point, try this:

1. List every device and roughly when each will need replacing. Divide the replacement cost across the months to get a monthly set-aside.
2. Add up your software subscriptions, connectivity and phones as they stand.
3. Add a security line — protection, backups and training — and resist the urge to cut it.
4. Add support, whether pay-as-you-go estimate or a monthly fee.
5. Sanity-check the total against what your business can comfortably sustain, and adjust the nice-to-haves, not the essentials.

That gives you a budget built from real needs rather than a number plucked from the air.

Getting it right for your business

The honest answer to “how much should I spend?” is: enough to keep your business running smoothly and safely, structured so the cost is predictable and the essentials are never skipped. What that looks like depends on your sector, your size and how much you rely on your systems.

If you would like help sizing an IT budget that fits your business — without paying for things you do not need — take a look at our services or get in touch for a straight-talking conversation.