How Much Should a Small Business Spend on IT?

The most common answer to this question is "it depends," which is technically true and completely unhelpful.

Here's a more honest answer: most small businesses spend between 4% and 8% of revenue on IT, depending on their industry and how dependent they are on technology to run their operations. Professional services firms tend to be at the higher end. Light manufacturing and field services tend to be lower. Healthcare and financial services are often above 8% because of compliance requirements.

If you're significantly below 4%, you're probably underinvesting and carrying risk you're not aware of. If you're at 10% or above and you're not in a highly regulated industry, you may be overpaying, or you may have a strategic initiative underway that justifies it.

The number itself is a starting point for the conversation, not the answer.

What the Budget Actually Covers

Before you can evaluate whether you're spending the right amount, you need to know what you're spending it on. Most small business IT budgets break down into a few categories:

Managed services (your MSP). This is typically the largest line item for businesses that have outsourced their IT. It covers helpdesk, monitoring, patching, endpoint management, and security tooling. Most MSP pricing runs between $100 and $200 per user per month for a full stack.

Software and SaaS. This is the line item that surprises most business owners when they add it up. CRM, accounting, HR, project management, productivity suite, communication tools, industry-specific software. It compounds fast and most organizations have licenses they're paying for that aren't being used.

Hardware and infrastructure. Computers, servers (if any), networking equipment, phones. This tends to be lumpy since hardware purchases happen in cycles rather than monthly. Budget it on a per-year basis using a 3 to 4 year replacement cycle for endpoints.

Security. Sometimes bundled into your MSP, sometimes separate. Includes endpoint protection, email security, backup, identity management, and increasingly cyber insurance premiums. This is where underinvestment creates the most exposure.

Projects. One-time initiatives outside the run-rate. A new system implementation. A network upgrade. A migration to cloud infrastructure. These need to be budgeted separately because they don't belong in your recurring cost baseline.

The Benchmarks Are Less Useful Than You Think

Industry benchmarks are useful for a gut check. They're not useful for setting your actual budget, because they don't account for what you're trying to accomplish.

A business that's going through a growth phase, integrating an acquisition, or preparing for a PE transaction has different technology requirements than one that's in a steady state. A business where employees are distributed across four states has different infrastructure needs than one where everyone is in the same office.

The right IT budget for your business is the one that covers your current risk exposure, maintains the systems your operations depend on, and funds the initiatives that support where the business is going. Working backwards from a benchmark percentage can leave you underinvesting in critical areas and overspending in others.

The Conversation Most Business Owners Never Have

The reason most small business IT budgets are wrong isn't that owners are careless. It's that no one is having the strategic conversation about what the technology environment should look like and what it costs to get there.

The MSP is focused on keeping things running. That's what you pay them for. They're not typically asking "does this business need to spend more on IT next year, and where specifically?" They're renewing contracts, responding to tickets, and managing the environment they were handed.

The result is that technology budgets tend to be set by inertia. Whatever you spent last year plus a small escalation. Nobody's looking at the full picture.

That's the gap a fractional CTO fills. Not managing the IT, but owning the strategic view: what you have, what you need, what it should cost, and how to hold the vendors accountable to that picture.

A Practical Starting Point

If you've never done a real technology budget review, here's where to start:

Pull together everything you're currently spending on IT, from every category above. Most businesses find the number is higher than they expected once SaaS is included.

Identify what you're getting for it. Are your systems reliable? Is your data backed up and tested? Are you carrying cyber risk that your current tools don't address?

Compare that picture against where the business is going in the next 12 to 24 months. Does the current technology environment support that trajectory, or is it going to create friction?

That review doesn't need to be complicated. It needs to be honest. And it's a lot easier to do with someone who's done it before.