How to Build an IT Roadmap and Budget for a Small Business

For many small businesses, IT spending is reactive. A laptop dies, so you buy one. An insurer asks about multi factor authentication, so you scramble to switch it on. A supplier announces a price rise, so you absorb it. None of these is a disaster on its own, but together they make IT feel unpredictable and expensive. An IT roadmap changes that. It is a simple plan, usually covering the next 12 to 24 months, that lists what you will change, when, why and roughly what it will cost.

What an IT roadmap is, and what it is not

A roadmap is not a technical document full of jargon, and it is not a wish list. It is a short, dated plan that a business owner or finance director can read in five minutes and use to make decisions. A good roadmap:

• links each item to a business reason, such as growth, security, compliance or saving time
• shows when each item is planned, usually by quarter
• gives a cost estimate, split into one off and ongoing costs
• names who is responsible
• is reviewed regularly and changes as the business changes

Step 1: start with the business, not the technology

Before thinking about kit, ask what the business is trying to do over the next two years. Are you hiring? Opening a second site? Moving to more hybrid working? Bidding for contracts that require Cyber Essentials? Planning to sell the business? Each answer has IT consequences, and the roadmap should support them.

Then list the things that will happen whether you plan for them or not:

• Computers reaching the end of their useful life (see when to replace business computers)
• Software and operating systems reaching end of support, such as Windows 10
• Contract renewal dates for broadband, phones, software and support
• The UK analogue phone switch off, if you still have traditional lines (see our PSTN switch off guide)
• Insurance renewals and any new questions your insurer is asking

Step 2: review where you are now

A quick health check gives you the rest of the list. Look at:

• Security: multi factor authentication, endpoint protection, email filtering, admin accounts, staff training.
• Backups: what is backed up, where, and when you last tested a restore.
• Devices: ages, warranties and whether they are managed centrally.
• Microsoft 365: whether your licences match how people work. Our Microsoft 365 plans comparison can help.
• Network and connectivity: broadband speed and resilience, WiFi coverage, firewall age.
• Pain points: what frustrates staff every week.

Step 3: prioritise

You will usually have more ideas than budget. A simple way to prioritise is to sort each item into one of four groups:

1. Must do: legal, contractual or security issues and hard deadlines.
2. Should do: things that reduce real risk or remove regular frustration.
3. Could do: improvements that would be nice and save some time.
4. Not now: ideas to revisit next year.

Then spread the must and should items across the quarters so that no single quarter is overloaded, either with cost or with change for staff.

An IT roadmap template

Here is a simple layout you can copy into a spreadsheet. The example rows show the kind of items a business of 20 to 40 staff might include. The costs column is left for your own figures, because every business is different.

Step 4: turn it into a budget

Once each item has a rough cost, add them up by quarter and by type:

• One off costs: hardware, installation, projects and certification. These are often easier to plan when spread across the year.
• Ongoing costs: monthly or yearly subscriptions such as Microsoft 365, backup, support, phones and broadband. Remember these grow with headcount.
• A contingency: a modest amount set aside for the unexpected, such as an early laptop failure.

Our article on how much IT support costs covers the ongoing side in more detail.

Step 5: review and keep it alive

A roadmap that sits in a drawer is no better than no roadmap. Look at it every quarter: tick off what is done, move anything that slipped and add anything new. Once a year, do a fuller review alongside your business plan and budget. If you have an IT provider, they should bring this to you rather than waiting to be asked.

Common roadmap mistakes to avoid

• Making it too technical. If the people who approve the budget cannot understand it, it will not be used. Describe each item by what it does for the business, not by product names.
• Planning everything for the first quarter. Too much change at once overwhelms staff and makes it harder to spot what caused a problem. Spread the work out.
• Forgetting ongoing costs. A new system often brings a monthly subscription, support time and training. Include these, not just the purchase price.
• Ignoring the people side. New tools only deliver value when staff know how to use them. Build in time for training and for explaining why things are changing.
• Leaving out security because nothing has gone wrong yet. Security work rarely feels urgent until after an incident. Treat the basics, such as multi factor authentication, tested backups and up to date devices, as must do items.
• Writing it once and filing it. Businesses change during the year. A roadmap that is not reviewed quickly becomes out of date and ignored.

How Cyber Fits can help

Building and reviewing an IT roadmap is part of how we work with managed IT support clients in Sunderland and across the North East. If you would like help putting your first one together, our IT projects team can help you plan and deliver it, or start with a free IT review.