2 October 2026

Small Business IT Budget: What to Include and How to Plan It

Photo by Artem Podrez on Pexels

Ask most small business owners what's in the IT budget and you'll get the same answer: a few new laptops, Microsoft 365 licences, and whatever the IT provider charges each month. That's the visible spend. It's rarely the whole picture.

What tends to get missed is everything that sits around those three items. Setting a new laptop up properly. The cyber insurance renewal that lands every March. A software subscription that's crept up in price twice since it was first signed. None of it looks like much on its own, but a budget built only from last year's obvious invoices tends to get caught out somewhere during the year, usually by a renewal, a replacement, or a piece of work nobody scheduled.

There's No Single Right Number

You'll find plenty of advice online suggesting a business should spend a fixed percentage of revenue on technology. Treat that as a sanity check at most, not a starting point. A ten-person accountancy practice, a retailer, and a small manufacturer can turn over similar revenue and need almost nothing in common from their IT budget.

What actually drives the number is how much the business depends on each system, not how big the business is. If the phones going down for an afternoon costs real business, that connection needs more attention and more budget than it would for a company that can happily work offline for a day. If staff handle client financial records or health information, security and compliance costs are going to sit higher than they would for a business with nothing sensitive to protect.

Work out what your systems actually cost to run properly first. Compare that against a benchmark afterwards if you want reassurance, not the other way round.

Know What You're Actually Paying For

You can't budget for what you don't know you have. Before anything else, put together a proper inventory: every computer, phone, server, piece of network kit, and every software subscription and cloud service the business pays for, who uses it, what it costs, and when it renews.

This is worth doing properly rather than from memory. Check company card statements and department expenses as well as the obvious IT invoices. It's common for a subscription bought directly by an employee, expensed once and then forgotten, to never make it onto the main list at all. Reviewing this once a year during budgeting isn't quite often enough on its own either. A short monthly check that includes a quick look at what's running and what's failing catches problems, and surprise costs, while they're still small.

The inventory itself usually turns up savings before you've spent a penny: duplicate tools doing the same job, licences still assigned to someone who left months ago, or a subscription nobody on the team can actually explain.

Hardware Costs More Than the Sticker Price

Every laptop, monitor, phone and piece of network equipment the business expects to buy or replace this year belongs in the budget, and so does everything around the purchase: a docking station, a warranty extension, delivery, and the time it takes to actually get a new machine ready for someone to use. Installing software, applying security settings, moving files across and testing that everything works isn't free, even when nobody invoices for it separately.

Keep a record of each device's age and expected replacement date, and budget for a steady, planned number of replacements each year rather than waiting until several machines start misbehaving at once. That's exactly the trap that caught out plenty of businesses still running Windows 10 past its support cut-off, planning replacements around an operating system deadline rather than actual device age.

A spare laptop, kept ready to go, is cheap insurance against downtime when something fails unexpectedly. And when equipment does get retired, budget for wiping it properly before it's sold, recycled or handed on. Business data doesn't leave a hard drive just because the device has left the building.

Software and Cloud Subscriptions Rarely Sit Still

List every subscription the business runs: email and productivity tools, accounting software, your CRM, backup, security tools, website hosting, domain renewals, the lot. Note whether each one bills monthly or annually, because several annual renewals landing in the same month can catch cash flow out even when the monthly-equivalent cost looks perfectly affordable.

Prices on these also move more often than people expect, and licence counts drift upward as people join and rarely get trimmed back down when someone leaves. A Microsoft 365 tenant that hasn't had its settings and licensing properly reviewed in a while is also more likely to be paying for access nobody's using, not just costing more than it should.

Budget for hiring too. A new starter is rarely just one email licence. Depending on the role, they might need security software, device management, and access to specialist tools the rest of the team doesn't use.

New Starters and Leavers Cost More Than One Licence

Every new employee needs a computer, accounts, software, and setup work before their first day goes smoothly. Every leaver needs the reverse: access removed, equipment collected, and licences reassigned or cancelled, ideally before their last day rather than weeks after. The businesses that get caught out here usually cut corners much earlier, on the way in rather than the way out. Rushed onboarding is very often the real cause of a messy, drawn-out offboarding process later, and the cleanup work that follows costs more in staff time than doing it properly the first time would have.

Contractors count too, even when they bring their own laptop. They still usually need accounts, secure access to specific systems, and a plan for removing that access cleanly once the work's finished.

Decide How You're Actually Paying for Support

Most small businesses land on one of three approaches: a managed IT provider on a monthly contract, an in-house hire, or paying for help only when something breaks. Each has a different budget shape.

With a managed contract, read what's actually included rather than assuming. Help desk support, monitoring and routine maintenance are usually covered. Larger projects, office moves, and out-of-hours emergency work often aren't, and it's worth knowing that before you need it rather than after. If you pay for support as and when it's needed, look back at what the last two or three years actually cost, including the emergency call-outs, not just the routine visits.

An in-house hire brings its own budget line beyond salary: recruitment, training, and cover for holidays and illness, plus the reality that one person still needs outside help for a major project or a serious incident. Whichever route fits your business, it's worth comparing what a managed provider actually includes against what you're currently piecing together yourself.

Cybersecurity Deserves Its Own Line

Security spending has a habit of hiding inside other budget lines, tucked into a software subscription here or a support contract there, which makes it hard to see what's actually being spent and what still needs doing. Pull it out and look at it on its own: endpoint protection, email filtering, multi-factor authentication, security monitoring, and staff training all belong here, whether they're billed separately or bundled into something else.

What you actually need depends on what you hold and what a breach would cost you, not a generic checklist. A business holding client payment details needs more protection than one that doesn't, and a customer contract or insurance policy may already be dictating some of this for you. A proper look at cyber security services is the right starting point if you're not sure which of these actually applies to your business and which you're already covered for elsewhere.

Backup Costs More Than the Storage Itself

Budget for the whole backup process, not just the space it sits in: the software, monitoring, and the time it takes to actually test that a restore works, not just that a backup job completed. A green tick on a backup dashboard tells you a task ran. It doesn't tell you the data can be recovered.

This matters more than it used to, because cyber insurers are increasingly specific about what they expect a backup to look like before they'll pay out, right down to whether it's immutable. That's worth sorting out before the next renewal lands, not during a claim.

Internet and Network Equipment

Your internet connection, router, firewall and wireless access points all belong in the budget, along with whatever support or security is attached to them. If losing internet access would stop the business working entirely, weigh the cost of a backup connection against what an outage would actually cost in lost time and missed customer contact. Ask whether that backup line genuinely uses different infrastructure to your main one. Two connections that both run through the same local exchange can fail together.

Network equipment needs updates and eventually needs replacing. A router or firewall that's stopped receiving security updates from its manufacturer is a bigger risk than an old one that still gets patched, regardless of how well it still seems to work day to day.

Phones and Communications

Business mobiles, landline replacements, video calling and any call recording tools are easy to budget separately from the rest of IT, but they're still part of the same picture, and they carry the same onboarding and offboarding costs as everything else on this list. A business mobile setup that runs through one account and one bill, rather than staff picking their own personal contracts and expensing them, tends to be easier to budget for and easier to secure when someone leaves.

Compliance, Contracts and Cyber Insurance

Your industry, your customer contracts, or your insurance policy may already require specific technology controls, and it's worth knowing what those are before the renewal or the audit lands rather than scrambling once it has. A customer security questionnaire or a cyber insurance application can both surface gaps you didn't know you had, from multi-factor authentication that isn't quite as complete as you thought to a backup process that wouldn't hold up under questioning.

If certification is part of your plan for the year, for a customer requirement, an insurer, or your own peace of mind, that's a real budget line with a real cost and timescale, not something to bolt on at the last minute. And cyber insurance itself is worth budgeting for properly rather than renewing on autopilot, especially given how specific renewal forms have become about what they expect to see in place.

Under UK GDPR, a serious personal data breach also needs reporting to the ICO within 72 hours of your business becoming aware of it. That's a compliance deadline worth knowing about before an incident, not something to work out for the first time while it's happening.

Planned Projects Need Their Own Line

Keep anything one-off, an office move, a server replacement, moving data to a new system, separate from day-to-day running costs. Estimate the whole project, not just the headline cost: licences, setup, data transfer, testing, and training all belong in the same figure. Some projects need the old and new systems running side by side for a while during the handover, and that overlap has a cost too.

Keep an Eye on Renewal Dates

For each major supplier, note who owns the contract, when it renews, and how much notice you need to give if you want to change or cancel. Some services renew automatically without a reminder. Others need weeks of notice, and missing that window can mean paying for another full term you didn't want.

Check too that important accounts, your domain registration especially, are registered to the business rather than tied to one person's personal email or payment card. That's a small thing to fix now and a genuinely difficult one to unpick after someone's left.

A Reserve for the Unexpected

A laptop gets dropped. A firewall fails on a Friday afternoon. Something happens that sits outside your regular support agreement and needs sorting immediately, not next week. There's no single reserve figure that fits every business, but looking back at what you actually spent on unplanned IT work over the last year or two gives you a realistic number to plan around.

It's also worth understanding what a genuinely bad outcome actually costs, not just a broken laptop. Seeing how a real ransomware incident actually unfolds, and what it cost the business it happened to, puts the size of a sensible reserve into proper perspective.

Separate What's Recurring From What Isn't

Subscriptions, support contracts and equipment leases recur. New equipment, migrations and major upgrades don't. Keeping the two apart in your budget makes it much easier to see when a bigger payment is coming, rather than discovering it's landed the same month as three other renewals. Your accountant may also need this split for tax purposes, since operating costs and capital purchases are often treated differently, so it's worth confirming the right treatment for your business rather than guessing.

Putting the Budget Together

A practical order to work through it:

• Build a full inventory of hardware, software, services and contracts.
• Record current costs, renewal dates and notice periods against each one.
• Identify what needs replacing this year.
• Estimate hiring, leavers and any other planned changes to headcount.
• Add support, cybersecurity, backup, training and compliance as their own lines.
• Budget planned projects separately from day-to-day running costs.
• Set a reserve based on what unplanned work has actually cost you before.
• Review the whole thing with whoever handles your IT and your accountant before it's signed off.

Record who's responsible for each line, not just what it costs. A budget with an owner attached is far more likely to get reviewed properly than one that's filed away until next year.

Review It Through the Year, Not Just Once

Check the budget against actual spending at least once a quarter. Look for new subscriptions that have appeared, licences nobody's using any more, and projects that came in over or under what you expected. Update the forecast whenever the business hires, changes location, or takes on a contract with new security requirements attached.

A quarterly look also buys you time before the big renewals land. Comparing providers or switching a service is a much calmer decision three months out than it is the week before a contract auto-renews.

If your current IT budget still stops at computers and a support contract, getting in touch is the quickest way to find out what else it should probably cover, and what you might already be overpaying for without realising it.