A lot of small business owners have an IT budget with one line on it. It says something like “computer stuff,” and it covers Microsoft 365 and whatever broke last year. Then the server dies in January, three annual renewals land in the same month, and a new hire needs a laptop nobody planned for.

None of those are really surprises. They are costs that were always coming, just not written down anywhere. A real IT budget is mostly the work of writing them down before they show up.

I want to walk through how to build one: where to start, the fifteen line items most businesses should have, the ones people forget, and how to keep it honest during the year.

Why there is no standard IT budget for a small business

You will find articles online that say a small business should spend some fixed percentage of revenue on technology. I would not lean on that number. The honest answer is that there is no standard percentage that fits everyone.

Think about a ten-person law firm, a parts store, and a small manufacturer with the same revenue. They run completely different systems. The number of people, locations, computers, cloud services, and security requirements all change the IT budget far more than revenue does.

What matters more is how much the business depends on each system. If the internet going down stops you from taking payments, the internet connection deserves real money. If you handle health records or client financial data, security and compliance will cost more than they would for a business that holds very little.

So build your IT budget from what you actually need, then compare it to a benchmark if you want a sanity check. Not the other way around.

Start your IT budget with a list of what you already have

You cannot budget for things you do not know you own. Start with an inventory: computers, phones, tablets, printers, any server, network equipment, software, cloud services, the website, domain names, backups, and phone service.

For each one, write down who uses it, what it costs, when it renews, who manages it, and how much it would hurt if it stopped working. The NIST Small Business Quick Start Guide recommends exactly this kind of list, including what happens to the business if an important item becomes unavailable.

Then go hunting. Look through invoices, the company credit cards, bank statements, and app store receipts. Software someone bought on their own card usually does not show up anywhere else. Almost every business we onboard finds something here: licenses for people who left, two tools doing the same job, or a subscription nobody remembers signing up for. That money pays for part of the rest of the IT budget.

The 15 line items in a complete IT budget

Not every business needs every line. But every business should look at every line and decide.

• Computers and accessories. Including monitors, docks, headsets, and the setup time before anyone can use a new machine.
• Other equipment. Phones, tablets, printers, scanners, payment terminals, and battery backups.
• Software and cloud subscriptions. Email, accounting, scheduling, industry software, e-signature, password managers, and everything else that bills monthly or yearly.
• IT support. A managed IT agreement, internal staff, pay-as-you-go help, or some mix.
• Cybersecurity. Protection on every computer, email filtering, multi-factor sign in, monitoring, and planning for what happens if something gets through.
• Backup and recovery. The backup service, the storage, and the time to test that restores actually work.
• Internet and network equipment. The connection itself, plus routers, firewalls, switches, wireless access points, and cabling.
• Phones and communication. Business phone service, mobile plans, video meetings, and messaging.
• Website and domains. Hosting, domain renewals, security certificates, and someone keeping the site updated.
• Staff training. Security awareness training, training on new software, and the paid time people spend doing it.
• Hiring and departures. Equipment, licenses, and setup for new people, and the work of shutting off access when someone leaves.
• Compliance and insurance requirements. Audits, assessments, policy work, and whatever your cyber insurance application asks you to have.
• Planned projects. An office move, a new location, a server replacement, a phone system change.
• Equipment disposal. Wiping and recycling old computers and drives properly.
• A reserve. Money set aside for the thing that breaks without warning.

The costs owners leave out most

When I look at an IT budget a business already has, the same gaps show up over and over. Here they are, so you can check yours.

Setup time. A new laptop is not ready when it comes out of the box. Someone has to install software, set up security, move files, connect the printer, and test everything. That labor belongs in the IT budget next to the price of the computer.

New hires and departures. A new employee needs more than an email license. They may need security software, backup, a phone number, and access to industry software. When someone leaves, their access has to be shut off, their files moved, and their licenses canceled or handed to someone else.

Testing backups. A backup that reports success has only proven that a job ran. Testing a restore is what proves you can get your data back. The UK’s National Cyber Security Centre recommends regular backups and testing that they can be restored. That testing takes time, and time costs money.

Training time. The training service might be cheap. The hours your staff spend on it during the workday are not free. The Australian Cyber Security Centre’s small business guide treats employee awareness as a core defense against email scams, so this line is worth keeping.

Know what your IT support actually covers

If you pay a managed IT provider, find out exactly what the monthly agreement includes and what gets billed separately. Projects, after-hours work, office moves, and support for specialist software are the usual extras.

If you pay for help as needed, pull the last two or three years of invoices and add them up, including the emergencies. That number is usually higher than people remember.

For what it is worth, our managed plans fold several of these lines into one predictable per-user amount on our pricing page: support, security, backup, and Microsoft 365. I mention it because it changes how you build the IT budget. You end up with fewer lines to track, not because the costs disappeared, but because they are bundled. Ask any provider you work with which of the fifteen lines their agreement already covers, so you do not budget for something twice.

Keep recurring and one-time costs apart

Recurring costs are the subscriptions, support agreements, internet, phones, and backup services. One-time costs are new equipment, moves, migrations, and big upgrades. Keep them in separate sections of your IT budget.

Also mark which subscriptions bill yearly. Three annual renewals landing in the same month can squeeze cash flow even when the monthly math looked fine. Your accountant may also want equipment purchases separated from operating costs for tax purposes. The rules vary, so ask them how they want it set up.

Projects deserve their own budget. Count the whole cost: planning, licenses, equipment, moving data, testing, training, and support afterward. If the old and new systems have to run side by side for a month, count that overlap too. Australia’s small business office makes this point in its guide to building a digital strategy: budget for the ongoing cost, not just the upfront one.

The reserve, and why storm season belongs in it

Something will break that nobody planned for. A laptop gets dropped, a firewall dies, or a problem needs work outside your support agreement. The reserve in your IT budget is for that.

There is no right percentage here either. Base it on real numbers: what it would cost to replace your most important computer, get emergency help, or restore a critical system. Look at what you spent on surprises the last couple of years.

Here in Southeast Texas, I would add one more thing to think about: hurricane season. A storm can mean replacement equipment, temporary internet, or working from somewhere else for a week. If the business would need to keep running through that, it belongs in the reserve. Keep it separate from planned replacements. A computer that was already due for replacement is not an emergency.

Building your IT budget in an afternoon

• List your hardware, software, services, suppliers, and contracts.
• Write down monthly and yearly costs, renewal dates, and notice periods.
• Mark the equipment that needs replacing this year.
• Estimate hiring, departures, and any new locations.
• Add support, security, backup, training, compliance, and recovery.
• Give each planned project its own budget.
• Set a reserve based on real replacement and emergency costs.
• Review it with your IT provider and your accountant.

If you want a sense of the bigger picture behind those numbers, our post on building a small business IT roadmap covers how to plan the next few years, and our Q4 IT budgeting checklist covers what to keep, cut, and upgrade at year end.

Look at the IT budget every quarter

An IT budget written in January and ignored until next January is only half useful. Check it at least once a quarter. Compare real invoices to what you expected, and look for new subscriptions, unused licenses, price increases, and projects that ran over.

Update it when you hire, move, add a system, or sign a contract that comes with new security requirements. A quarterly look also gives you time before the big renewals, which is when you have room to compare providers instead of just paying the bill.

Frequently asked questions

How much should a small business spend on IT? There is no reliable percentage for everyone. Add up the equipment, services, security, support, and projects your business actually needs. Use benchmarks for context, not as the IT budget itself.

Should cybersecurity have its own line? Yes, even when some of it is bundled into licenses or your support agreement. That way you can see what protection is paid for and what still needs approval.

How often should the IT budget be reviewed? Build it once a year and check it every quarter. Update it after hiring, a move, a new system, or a new compliance requirement.

What costs get left out of an IT budget most often? Setup time, onboarding and offboarding, backup testing, training time, equipment disposal, subscription price increases, and urgent replacements.

Who should put the IT budget together? The owner or whoever handles finances, working with whoever handles IT. Department managers should add what they expect in hiring, new software, and projects.

If you are about to build or rebuild your IT budget and want to know what good IT support should include before you price it out, our free Small Business IT Buyers Guide walks through the questions to ask, in plain language.

Featured image: Pexels