How to Plan an IT Budget That Actually Holds Up
An IT budget for a South African SMB should cover five core areas: user licences and subscriptions, hardware refresh, connectivity and continuity, security and compliance, and support. Budget on a per-user basis, plan hardware over a three-to-four-year cycle, and ring-fence 10–15% for the unexpected. That's how you avoid the panic invoices that wreck cash flow mid-year.
Why do IT budgets keep blowing out?
If you've ever sat down in February with a tidy IT number and found yourself in August explaining a R180,000 overrun to your partners, you're not alone. Most small-business IT budgets fail for the same handful of reasons: they're built around last year's invoices rather than this year's reality, they ignore the slow drip of SaaS creep, and they treat hardware as a surprise instead of a schedule.
The emotional cost matters too. Nothing erodes trust between an office manager and the business owner faster than an unplanned IT spend — especially when it looks like something that should have been foreseen. You end up feeling blindsided by your own operations, and the IT guy becomes the villain of every management meeting.
What you actually need is a budget framework that reflects how modern IT is bought: mostly subscriptions, partly capital, with a small buffer for the things nobody can predict. Let's walk through it.
What should an SA small-business IT budget include?
Break your budget into five buckets. If every line item fits into one of these, you've got coverage. If something doesn't fit, you've either found a gap or something you shouldn't be paying for.
1. User licences and subscriptions. Microsoft 365 or Google Workspace, your accounting software, CRM, line-of-business apps, email security, antivirus. Budget per user, per month. This is the line that quietly grows — new hire here, new tool there — so review it quarterly.
2. Hardware and devices. Laptops, desktops, monitors, docking stations, servers (if you still have them), network gear, printers. Don't lump this into one number. Instead, build a refresh schedule.
3. Connectivity and continuity. Fibre, failover LTE, UPS maintenance, inverter servicing, backup internet. Loadshedding may be quieter than it was, but fibre cuts and municipal issues haven't gone anywhere.
4. Security and compliance. Endpoint protection, email filtering, backup and recovery, security awareness training, POPIA documentation, cyber insurance. For regulated professional-services firms, this bucket is non-negotiable.
5. Support and management. Your managed IT support contract, project work, consulting hours. If you're still on break-fix, this line is impossible to predict — which is part of why break-fix budgets fail.
How much should you actually spend on IT?
There's no magic percentage that fits every business. A law firm with 25 staff and sensitive client data will spend more per head than a 25-person logistics operation. That said, a few practical anchors help:
- Think per user, per month, not annual lump sum. It makes forecasting as you grow (or shrink) far easier.
- Managed IT support in South Africa typically sits in the R400–R700 per user per month range depending on scope. MiBOT's own flat rate is R450 per user per month for businesses from around ten seats upward.
- Hardware refresh works out cheaper when amortised over three to four years than when done reactively as machines die mid-month.
- Security spend scales with risk, not headcount. A ten-person financial advisory handling client portfolios needs more protection than a fifty-person warehouse.
How do you plan hardware refresh without the shock?
This is where most budgets quietly break. The business buys a batch of laptops in 2021, forgets about them, and then in 2025 everyone's machine starts dying in the same quarter.
The fix is a rolling refresh schedule. Divide your fleet into roughly equal thirds or quarters and plan to replace one group each year. By year four you're on a steady cadence — predictable monthly cost, no fire drills, no partner sitting with a laptop that takes seven minutes to open Outlook.
If you've never done this before, start with an audit. List every device, its age, who uses it, and its condition. Flag anything older than four years for replacement in the coming year. Everything else goes into the schedule.
Capex or opex: how should you buy IT?
The shift to subscriptions means more IT spend is operational rather than capital — and that's generally good news for cash flow. But some things still make sense to own outright.
| Buy outright (Capex) | Subscribe (Opex) |
|---|---|
| Laptops and desktops | Microsoft 365 / Google Workspace |
| Network switches, firewalls | Antivirus and email security |
| UPS and power hardware | Backup and recovery |
| Monitors, peripherals | Managed IT support |
| VoIP and telephony |
The general rule: hardware that sits on a desk or in a rack for years, buy. Services that are continually updated, patched or monitored, subscribe. Trying to "own" your security software by paying three years upfront almost always ends badly — the threat landscape moves faster than your invoice.
What hidden costs trip SA businesses up?
A few lines that quietly drain budgets:
- SaaS creep. Every department signs up for its own tool. Nobody tracks it. Review every subscription quarterly and cancel what nobody uses.
- Over-licensing. Paying Microsoft 365 Business Premium for a part-time receptionist who only needs email.
- Shadow projects. The "quick" integration that becomes a three-month consulting bill.
- Downtime. Rarely budgeted, but a day of outage during month-end at a professional-services firm can cost more than a year of proper proactive monitoring.
- Fragmented vendors. Three suppliers for internet, IT support and hosting usually costs more than one accountable team — and the finger-pointing is free.
Frequently asked questions
How often should I review my IT budget? Quarterly for subscriptions and user counts, annually for the full budget. Subscriptions change too fast to only check once a year — you'll miss licences for people who left in March.
Should I budget for a cyber incident? Yes, pragmatically. Set aside a modest contingency and invest in prevention — backups, email filtering, user training. Cyber insurance is worth pricing, but insurers increasingly expect to see proper controls and a certified IT partner before they'll pay out.
What's the difference between managed IT and break-fix for budgeting? Managed IT is a predictable monthly cost that includes monitoring, patching, support and prevention. Break-fix is pay-as-you-break — cheaper on paper, unpredictable in reality. We've written more on break-fix vs managed IT if you're weighing it up.
How do I budget for growth? Build your budget per user per month. When you hire, you know the marginal cost. When you plan to add five people in Q3, you can forecast exactly what IT will cost from the day they start.
Getting a budget that actually holds
If you're tired of IT invoices that arrive like weather — unpredictable and usually bad — you don't need a more complicated spreadsheet. You need a partner who can tell you what next year looks like, line by line, before it happens. That's the quiet luxury of a properly scoped managed service: no surprises, no panic calls to the finance director, no mid-year scramble.
If you'd like a second set of eyes on your IT budget before you lock it in, the MiBOT team is happy to walk through it with you — book a free consultation and we'll help you build something that holds up.
Last reviewed: October 2026
Keep reading
- Why Your Office PCs Are So Slow (And What Fixes It)Slow computers are quietly costing SA businesses hours every week. Here's what actually causes the drag — and the practical fixes that work.
- Does Your Business Have a Real Disaster Recovery Plan?Most SA small businesses think they have a disaster recovery plan. They have backups. Here's the difference — and how to build a plan that a…
- On-Premise Server or Cloud? A Plain-English GuideShould your SA business keep the office server or move to the cloud? A practical guide to costs, risks and what actually makes sense for you…
Explore MiBOT's IT support
Ready to Experience IT That Actually Works?
Let us take care of your technology so you can focus on growing your business.
- 25+ years supporting SA businesses
- Under 1-hour response
- ISO/IEC 27001:2022 certified