IT Budgeting for Growing SA Businesses — Templates & Benchmarks (2026)

Why IT budgets go wrong

Three mistakes we see in almost every SA SME: (1) hardware is still overweight while security is underweight; (2) SaaS spend has grown 3-4x in five years and nobody's tracked it; (3) the budget is a snapshot of last year plus 5%, not a forward-looking plan. Fix those three and the rest is arithmetic.

SA benchmarks by company size

All figures per month, all-in (licences + services + connectivity + security + hardware amortisation). Ranges reflect low to high complexity.

10-person business. R18,000–R38,000/month. R1,800–R3,800/user. Typically 1 site, M365 Business Standard/Premium, fibre + LTE failover, managed IT retainer.
25-person business. R42,000–R85,000/month. R1,680–R3,400/user. Add: proper EDR, backup, dedicated on-site hours, one small server or cloud VM.
50-person business. R80,000–R160,000/month. R1,600–R3,200/user. Add: SIEM/managed detection, formal DR, VoIP platform, Intune device management, cyber insurance.
100-person business. R150,000–R320,000/month. R1,500–R3,200/user. Add: multi-site connectivity, Azure workloads, dedicated security services, IT manager or virtual CIO.
200-person business. R280,000–R650,000/month. R1,400–R3,250/user. Multi-site, in-house IT team plus MSP, structured project pipeline, board-level security reporting.

The IT budget template — 12 categories

User licences. M365/Google Workspace, per-user apps (CRM, accounting, design).
Managed IT services. Retainer, on-site hours, remote support, monitoring, patching.
Connectivity. Primary fibre, failover LTE/5G, per-branch links.
Security. EDR, MFA, email security, awareness training, phishing simulations, MDR/SOC.
Backup & DR. M365 backup, server backup, cloud DR target, retention.
Voice / VoIP. Extensions, DIDs, call bundles, video conferencing.
Hardware (opex-amortised). Laptops, docks, monitors, mobile devices, printers.
Infrastructure. Firewalls, switches, wifi, UPS, cabling maintenance.
Cloud infrastructure. Azure/AWS/GCP consumption, third-party SaaS platforms.
Cyber insurance. Annual premium, growing 15–25%/year in SA.
Projects & change. Migrations, office moves, new systems — separate from run cost.
Reserve (10–15%). Unplanned incidents, licence true-ups, opportunistic investments.

Line items most SA businesses forget

Software audit true-ups (Microsoft, Adobe — hits at the worst time).
SaaS sprawl — the 20+ tools nobody's reviewed in 3 years.
Domain and SSL renewals — small but embarrassing when they lapse.
Mobile device policy (data, roaming, MDM licences).
Onboarding/offboarding time — hidden in the retainer or billed extra.
Training — user, admin and security awareness.
Compliance costs — POPIA registrations, PAIA manuals, DPIA work.
End-of-life migration reserve — Windows versions, M365 SKU changes, hardware EOL.

Capex vs opex — the modern shift

Ten years ago, IT was capex-heavy — servers, licences, hardware bought outright. Modern SA IT is 70–85% opex: subscription licences, managed services, cloud consumption, laptop-as-a-service. This is genuinely better for cash flow, tax deductibility and matching cost to consumption — but it makes budget growth invisible unless someone tracks per-user run cost year over year. Add that KPI to the finance dashboard.

How to review the IT budget annually

Per-user run cost trend. Should track headcount growth. If it's growing faster, investigate.
SaaS inventory audit. Every tool, every owner, every renewal date. Cut what isn't used.
Vendor consolidation review. Are you buying similar capability from 3 vendors? One usually wins on price and support.
Security spend as % of IT. Should be 12–20% in 2026. Below 10% is under-invested.
Project vs run split. Aim for 15–25% of budget on change/projects — pure run means the business isn't investing forward.
Board report. One page: total spend, per-user, security %, uptime, incidents, top risks, top opportunities.

Frequently asked questions

What percentage of revenue should we spend on IT?

SA benchmark for professional services: 3–6% of revenue. Retail/manufacturing: 1.5–3%. Financial services and tech: 6–10%. If you're below the low end you're likely under-invested; above the high end without a clear reason, you're leaking budget somewhere.

What does IT cost per user per month in SA?

All-in (licences + managed IT + connectivity + security + backup + hardware amortisation) sits around R1,500–R3,500 per user/month for a well-run SA SME. Split roughly: 30–40% software licences, 25–35% managed services, 10–15% connectivity, 10–15% security & backup, 10–15% hardware refresh.

How much should we set aside for hardware refresh?

3-year refresh cycle: budget R700–R1,000/user/month equivalent for laptops, R2,500–R5,000/employee/year for peripherals and misc. Servers should be replaced on a 5-year cycle — but honestly, most SA SMEs shouldn't own servers anymore. Move to cloud and remove the line item.

What do most SA businesses forget to budget?

Cyber insurance premiums (rising 20%+/year), security awareness training, software audit true-ups, M365 licensing tier changes, backup egress fees, project work vs. run-cost, and — critically — a change reserve of 10–15% for the unplanned.

Should IT be a cost centre or a capability?

Businesses that treat IT purely as a cost centre optimise for the wrong thing (lowest bill), not for enablement (revenue and productivity). Reframe IT budgets around outcomes — hours saved, downtime avoided, deals closed faster — and the ROI conversation gets much easier.