How Much Should You Spend on IT? Benchmarking IT Costs for Growing Businesses

Every fall, the same conversation happens in finance departments across the country. The CFO asks what next year’s IT budget should look like. The answer comes back as a number that’s roughly last year’s figure with a percentage added on top. Nobody in the room is sure whether that number is too high, too low or accidentally close to right. IT cost benchmarking exists to replace that guesswork with something defensible, but only if the benchmarks are applied with judgment.

Why There’s No Single Right Number for IT Spend

The first mistake in IT cost benchmarking is treating it as a universal ratio. A manufacturer spending 2% of revenue on IT and a financial services firm spending 8% can both be correctly resourced. The variable that matters most isn’t company size. It’s industry, followed closely by digital intensity and regulatory exposure.

The macro picture helps explain why the conversation gets so muddled. Gartner forecasts worldwide IT spending will reach $6.31 trillion in 2026, a 13.5% increase over the prior year, with data center systems alone growing 55.8% as AI infrastructure investment accelerates. That headline number means very little for a 150-person professional services firm in Jacksonville. What it does tell business leaders is that the cost of staying current is rising across every category, and budgets built on historical averages are likely to fall behind faster than they used to.

What the Benchmarks Say by Industry

Deloitte’s 2026 Global Technology Leadership Study, which surveyed more than 660 senior technology executives, found that technology investment now averages approximately 6% of revenue and is projected to reach about 8% over the next two years. That average masks significant variation. Industries with heavy regulatory exposure and digital intensity, like financial services and healthcare, consistently run above the average. Manufacturers, construction firms and other operations-heavy businesses typically run well below it. The percentage that’s correct for your business depends on what you actually do, not what the headline number says. 

Company size matters too, though less than industry. Smaller and growth-stage businesses tend to run higher as a percentage of revenue than larger enterprises in the same sector, because they lack the scale to spread fixed costs across a bigger denominator. A $20 million company and a $200 million company in the same industry will often spend similar absolute dollars on core security tooling and infrastructure. For the smaller firm, that’s a much bigger slice of revenue. If your IT spend looks high compared to a peer benchmark, scale is often the explanation. 

The Real Cost of Underinvesting

The hidden expense in an underfunded IT budget doesn’t show up on the IT line. It shows up in downtime, breach response and operational drag.

ITIC’s 2024 Hourly Cost of Downtime Survey found that more than 90% of mid-size and large enterprises now lose over $300,000 for every hour their systems are offline, with 41% reporting hourly losses above $1 million. Even small businesses with 25 or fewer employees often see downtime costs near $100,000 an hour once lost productivity, missed revenue and recovery expenses are added together. Those numbers don’t include litigation, regulatory penalties or the reputational damage that follows a public incident.

Security exposure compounds the math. The Verizon 2025 Data Breach Investigations Report found that ransomware appeared in 88% of breaches affecting small and mid-sized businesses, compared to 39% at larger organizations. Attackers target smaller companies specifically because those are the ones most likely to be running outdated platforms, deferred patching schedules and minimal monitoring. Cutting the IT budget rarely saves money in the long run. It just moves the cost to a less predictable line item.

The Less Obvious Cost of Overinvesting

The other failure mode gets less attention but happens just as often. A company looks at its IT spend, sees a number well above the industry benchmark and assumes it must be well protected. Often the opposite is true.

High IT spend concentrated in the wrong places creates its own problems. Redundant SaaS subscriptions accumulate quietly when departments buy their own tools without coordination. Security platforms overlap in function while leaving real gaps elsewhere. Expensive enterprise software gets purchased and never fully adopted because the team that needed it has already moved on to a different workaround. A 2025 Heimdal survey of North American managed service providers found that 89% of providers struggle with tool integration across their security stack, which is the same problem at the provider level that growing businesses face inside their own environments.

The clearest sign of overinvestment isn’t the total dollar figure. It’s the ratio of reactive spending to strategic investment. When most of the budget goes to maintaining tools nobody fully uses or to emergency fixes that should have been prevented, the business is paying premium prices for outcomes that proactive management would have delivered more cheaply. Proactive IT support and integrated tooling consistently cost less over a three-year window than the break-fix model they replace.

Building an IT Budget That Matches Your Business

IT cost benchmarking works best as a starting point, not a verdict. Use your industry’s range as the floor, then adjust for growth stage, regulatory exposure and how much of your operation actually runs on technology. The goal isn’t to hit a percentage. It’s to fund the right work in the right order. James Moore Technology Services helps growing businesses build IT budgets that hold up under scrutiny and deliver what the business actually needs. Contact us today.

All content provided in this article is for informational purposes only. Matters discussed in this article are subject to change. For up-to-date information on this subject please contact a James Moore professional. James Moore will not be held responsible for any claim, loss, damage or inconvenience caused as a result of any information within these pages or any information accessed through this site.