Tech Foundations

How to Budget for Technology in a Small Organization

In short

A small organization should budget 2 to 5 percent of its operating budget for technology, allocate 15 to 25 percent of that to security, and hold 10 to 20 percent as contingency, reviewing the budget quarterly.

Build a realistic annual tech budget for a small organization: replacement cycles, subscriptions, security spending and contingency percentages you can copy.

On this page
Two people look at a sewing machine on a table with orange fabric.
AusAID Counsellor meets with a Samoan small business owner in 2011 to discuss prepaid electricity meters that help manage her budget. Photo: Department of Foreign Affairs and Trade, Wikimedia Commons, CC BY 2.0.

A workable technology budget for a small organization is built from four components: predictable replacement of aging hardware, recurring software subscriptions, ongoing security spending, and a contingency fund for the failures that always arrive at the worst time. Most small organizations fail at budgeting not because they overspend, but because they treat technology purchases as surprises instead of scheduled events. This guide gives you percentage-based rules of thumb and a worksheet structure you can fill in during a single afternoon.

If you are starting from scratch rather than just building a budget, skim our small business technology guide first, then come back and put numbers against the plan.

How much should a small organization spend on technology?#

For most small organizations, total technology spending lands somewhere between 2 and 5 percent of the annual operating budget. This includes hardware, software, internet and phone service, security, and a modest amount of outside help, but not staff salaries if you employ a dedicated IT person.

Where you fall in that range depends on your profile:

Organization profileTarget share of operating budgetNotes
Service nonprofit, mostly office work2 to 3%Email, documents, a donor database, basic laptops
Small business with customer data3 to 4%Adds POS, CRM, compliance obligations
Data-heavy or regulated work (health, finance)4 to 5%Backup redundancy, audits, stronger security
Very small team under 5 people$6k to $12k total per yearPercentages get noisy at small scale; use dollars

A second sanity check is cost per person: roughly $1,000 to $2,500 per employee per year, all-in. If your headcount is 8 and your draft budget is $5,000, you are almost certainly underfunding replacement and security. If it is $40,000, look for overlap or gold-plating.

How do you budget for hardware replacement?#

Every device in your organization has a realistic service life, and budgeting becomes straightforward once you assign each one a cycle. The point is not precision, it is making replacement a scheduled line item instead of an emergency purchase.

Use these cycles as defaults:

  1. Laptops used daily: 4 to 5 years. Batteries and hinges wear; performance falls off noticeably after year four.
  2. Desktops: 5 to 6 years. Fewer moving parts and less wear than laptops.
  3. Phones: 3 to 4 years if staff-owned by the organization, longer if only lightly used.
  4. Servers or network attached storage: 4 to 5 years, with drive replacement expected earlier.
  5. Routers, switches, firewalls: 5 years. Security updates often stop before hardware dies, which is the real deadline.
  6. Printers: repair until parts become scarce, then replace; do not budget aggressively here.

How does staggering hardware purchases control costs?#

The trick that separates a manageable budget from a crisis is staggering. If you have ten laptops on a five-year cycle, replace two per year rather than all ten in one painful spending spike. Build a simple inventory with purchase date and planned replacement year; that inventory becomes the hardware section of your worksheet. When replacing machines, also compare the economics of certified refurbished units, which we cover in detail in our refurbished computers buying guide.

To size the line item: take the replacement cost of one device, divide by its cycle in years, and sum across the fleet. Ten laptops at $900 each on a five-year cycle is $1,800 per year. That is the number that goes in the budget, not zero and not $9,000.

How do you budget for software subscriptions?#

Software has quietly become the largest recurring line for most small organizations, because nearly everything is now sold per person per month. List every subscription, its per-seat price, and your seat count, then multiply.

The categories almost every organization has:

  • Productivity suite (email, documents, storage): typically $6 to $20 per user per month depending on tier. See our comparison of Google Workspace vs Microsoft 365 for small teams before committing to a tier.
  • Password manager: a few dollars per user per month, and one of the best returns on security spending you can get. Our walkthrough on setting up a password manager for your organization covers the practical steps.
  • Donor, client, or membership database: often the largest single line for nonprofits, sometimes $50 to $300 per month at small scale.
  • Accounting software: usually $15 to $80 per month.
  • Website and email marketing tools: highly variable, but easy to let drift upward.

How do you keep subscription costs under control?#

Two habits keep this section honest. First, run a quarterly audit of subscriptions and cancel anything unused for 90 days; small organizations routinely carry two overlapping tools doing the same job. Second, check for nonprofit or education discounts before paying list price, which many vendors offer at 50 percent or more. Our list of free and discounted software for nonprofits is a good starting inventory of what you should not be paying full price for.

For the worksheet, record each subscription as an annual figure (monthly price times 12 times seats) so it sits alongside hardware numbers cleanly.

How much of the technology budget should go to security?#

Security spending in a small organization is mostly about resilience, not exotic tooling. If you lose a laptop or get locked out by ransomware, the question is whether you can keep operating. Budget accordingly, and treat it as a recurring line rather than a one-time setup cost.

A reasonable allocation is 15 percent of your technology budget at baseline, rising toward 25 percent if you hold sensitive client, health, or financial data.

What that money buys:

LineTypical annual cost, 10-person orgPurpose
Endpoint protection$300 to $600Antivirus and malware protection on every device
Backup (cloud plus one local copy)$300 to $900Recovery when something fails; see cloud backup vs local backup for the trade-offs
Password manager$300 to $500Prevents the most common breach path
Staff security training$200 to $1,000Phishing awareness; start with our guide on recognizing and training staff against phishing
Multi-factor authenticationOften $0 to $500Usually free with your existing tools, sometimes an add-on
Outside review or incident help$500 to $2,000An annual or biennial outside look at your setup

If your total technology budget is $15,000, expect roughly $2,500 to $3,500 of that to sit in security. That may feel large next to a hardware line, but the cost of one incident involving client data, or the data notification obligations described in our data privacy basics guide, will dwarf it.

Nonprofits should also work through our broader nonprofit cybersecurity checklist before finalizing this section, so the budget reflects gaps you actually have rather than gaps you assume you have.

How large should the technology contingency line be?#

Technology fails unpredictably, and small organizations have no slack to absorb it. A failed drive in year three, a dropped laptop before its replacement year, a router that dies mid-event: these are not budget errors, they are statistics. Reserve 10 to 20 percent of your total technology budget as contingency.

Rules that make a contingency line work:

  • Calculate it last, after hardware, software, and security lines are set, as a percentage of the subtotal.
  • Let it roll over. If unused, it becomes next year’s contingency plus a buffer, not a signal to cut the technology budget.
  • Define what it covers: failures of existing equipment, emergency consulting, and security incidents.
  • Define what it does not cover: new projects, upgrades you want rather than need, and equipment already on the replacement schedule.

Some organizations prefer to split this into two lines: a true contingency (10 percent) and a separate “opportunity” line (5 percent) for unplanned upgrades or tools that prove their worth mid-year. That split keeps genuine emergency money from being spent on a shiny new tool in month two.

How do you structure the technology budget worksheet?#

Here is the structure to build in any spreadsheet. Six columns is enough; complexity is what kills small budgets.

  1. Item: e.g., “Laptop fleet, 8 machines, 4-year cycle”
  2. Category: Hardware, Software, Security, Internet, Contingency
  3. Annual cost: the number that goes in the budget
  4. Cycle or renewal date: when it needs action
  5. Owner: who decides or executes
  6. Notes: vendor, discount status, dependencies

Then build the top-level summary as five lines:

LineHow to calculateTypical share of total
Hardware replacementFleet replacement cost divided by cycle years30 to 40%
Software and subscriptionsAll annualized seat costs25 to 35%
Security and resilienceTools, training, backup, review15 to 25%
Internet and connectivityContracts times 125 to 10%
Contingency10 to 20% of the subtotal above10 to 20%

The percentages will not sum to 100 for every organization, and that is fine: they are guardrails, not laws. A graphic design team will run hardware-heavy; a counseling nonprofit will run security-heavy.

Two more worksheet habits worth the effort. Add a column tracking each item’s discount eligibility, since nonprofit pricing often changes annually. And if you rely on a volunteer or part-time helper for support, budget for the gaps they cannot cover; our advice on managing volunteer tech help explains where paid help pays for itself.

How often should you review the technology budget?#

An annual technology budget drafted once and filed away is a wish list. A useful one is reviewed four times a year in a 30-minute session: check subscription usage, confirm this quarter’s hardware replacements happened, reconcile contingency spending, and note anything that changed, from headcount to compliance obligations.

Use the quarterly review to catch the two most common failures in small-organization budgeting. The first is subscription drift, where monthly charges grow by $10 or $20 at a time until they exceed hardware spending. The second is deferred security spending, which is invisible right up until the incident that forces a reallocation from programs into emergency recovery.

Key Takeaways#

  • Target 2 to 5 percent of your operating budget, or $1,000 to $2,500 per employee per year, as a starting sanity check.
  • Replace laptops on a 4 to 5 year cycle and desktops on a 5 to 6 year cycle, staggering purchases so roughly a fifth of the fleet renews annually.
  • List every subscription as an annualized per-seat cost, audit it quarterly, and claim nonprofit or education discounts before paying list price.
  • Reserve 15 to 25 percent of the technology budget for security: backup, endpoint protection, password management, and staff training.
  • Hold 10 to 20 percent as contingency for failures, and let unused contingency roll over rather than cutting next year’s budget.
  • Build the worksheet with six columns (item, category, annual cost, cycle date, owner, notes) and review quarterly, not annually.

Key concepts

Frequently asked questions

How much should a small organization spend on technology per year?

A practical range is 2 to 5 percent of annual operating budget, with nonprofits and data-heavy organizations at the higher end. For very small organizations, expect roughly $1,000 to $2,500 per employee per year all-in, covering hardware, software, internet and security. Use that as a sanity check, then adjust for your actual equipment age and compliance needs.

How often should we replace laptops and desktops?

Plan on a 4 to 5 year cycle for laptops used daily, and 5 to 6 years for desktops with fewer moving parts and less wear. Stagger purchases so roughly a fifth of your fleet is replaced each year, which smooths cash flow and avoids a single catastrophic refresh year. Storage drives and batteries often need attention at year three.

What percentage of the IT budget should go to security?

Allocate at least 15 percent of your technology budget to security: backup tools, password management, endpoint protection, staff training and possibly a periodic outside review. If you handle sensitive client, health or financial data, push that closer to 25 percent. Security is not a one-time purchase, so it needs a recurring line.

Should we build a technology contingency fund?

Yes, set aside 10 to 20 percent of your total annual technology budget for failures and surprises: dead drives, stolen laptops, emergency consulting, or a flooding router room. Treat it like an insurance line that rolls over if unused. Without it, one incident forces you to pull money from programs or defer critical fixes.