Receive our Newsletter for Top Tips
on Getting the Most Out of Your IT

What is an IT Strategy, and Should My Business Have One?


Developing an IT strategy for your business may not be something you’ve considered, especially if your business is small, or still in start-up mode. Given that most businesses rely on IT and digital tools to successfully operate, having an IT strategy is more important than you may realise, and it doesn’t need to be complex. An IT strategy is also important to manage and mitigate cybersecurity risk.

We’ve put together some of the key things you should consider when creating a simple IT strategy to support your business.

What is an IT strategy?

An IT strategy is like any business strategy, which outlines your business goals and how you plan to achieve them. It relates specifically to IT, and how you’ll manage your technology to help grow, improve, support and add value to your business both now and in the future.

Your IT strategy should be:

  • Documented in writing, and stored somewhere that key stakeholders in your business can access
  • Shared with your team, to ensure understanding and alignment
  • Reviewed on a regular basis (at least annually) to see if it needs refreshing or updating
  • Specific and relevant to your operation, without bogging you down in explicit and prescriptive statements that can make it cumbersome and inflexible

Benefits of an IT strategy for your business

Developing an IT strategy will allow you to consider and answer some key question about how you’re using IT to support and grow your business, including:

  • Do your existing IT efforts support your business and its growth path?
  • Are you making the right IT investments, and are they cost effective?
  • Is the IT that you currently have managed in a way that best supports your team and customers?
  • Is IT adding value to your business, in its current state?

For small businesses in particular, making the wrong IT investments or not having IT managed in a way that adds value can cause waste – in time, in money and in resources. Creating an IT strategy, either yourself or with an IT consultant, allows you to consider all the factors that will help you make the right choices for your business now, and in the future.

How to create a simple IT strategy

A simple IT strategy needs to address:

  1. Your IT vision statement, and how it relates to your business goals
  2. Critical projects that will require IT support and investment, and timelines
  3. IT resource stocktake: what you have versus what you’ll need
  4. How IT will be managed in your business
  5. Customer interfaces
  6. Security requirements
  7. Your IT budget

1. Your IT vision statement

In business, a mission statement addresses the “how”, while a vision statement addresses the “what”. Vision statements paint a picture of your business’s ideal future state – on where you intend to be. A simple IT vision statement could be:

“Our vision is to leverage our information technology tools to create value for our customers and our teams, so that we can continue to grow and succeed in our market.”

2. Critical projects that require IT support and investment

Establishing what critical projects and initiatives your business has, and what IT you’ll need to support them, is important in your IT strategy. Setting out your projects, and the timelines you need to deliver them in, will help you identify any shortfalls in IT infrastructure, resourcing and budget that you’ll need in order to deliver them.

3. IT resource stocktake

A stocktake of your IT resources will include:

  • An asset register: including devices, infrastructure (servers, routers, modems, firewalls, etc), software, licenses and agreements
  • Support personnel: the roles within and outside of your business that support your IT

4. How IT will be managed

This step gives you the opportunity to review your current IT management process, and consider whether it’s effective for your future state. Your live IT environment will be:

  • On premise (your own on-site servers and supporting infrastructure)
  • Managed off-site by a managed services provider
  • In a cloud environment
  • A hybrid mix of these

Take the time to consider whether your current IT management process is sufficient to support your business growth, or whether further investment or a model change is needed to add the most value. For small and medium sized businesses, managed IT services from a dedicated off-site provider can often help you make more effective use of your resources, providing greater resilience and expertise to ensure business continuity.

5. Customer interfaces

Your IT strategy should cover how your customers (and other users) will access your business content and communicate with you. This may be through a  website or app, where they can see all the information they need about your  products and services, and how to engage with you. Or it may include webchat, social media messaging, AI driven support, ecommerce and perhaps  a customer portal.

6. Security requirements

Robust IT security is absolutely critical, to protect your business from cybersecurity risk. The impact of cybercrime on small to medium businesses can be significant, in both financial and reputational cost.

Between 1 July 2020 – 30 June 2021, the Australian Cyber Security Centre (ACSC) observed over 67,500 reports of cybercrime (up 13% from the previous year), and self-reported losses of $33 billion due to cybercrime. The average loss for medium sized businesses for each cybercrime reported was $AUD33,442 – that’s a significant sum to lose to cybercriminals for any business.

ACSC: Cybercrime reports and average reported loss by organisation size (2020-2021)

At minimum, your IT strategy needs to identify and address the following security related requirements to protect your business from cybercrime:

  • Anti-virus and anti-malware programs
  • Encryption storage and masking
  • Firewalls
  • Multi-factor authentication for users
  • Password management
  • Cybercrime reporting to the ACSC and compliance with Australian government regulations

7. Your IT budget

Last, but definitely not least, your IT strategy needs to include your IT costs and budget. Your costs will include:

  • Equipment costs – for buying or leasing IT equipment
  • Software costs, including purchasing, deploying and licensing
  • Hardware and infrastructure maintenance costs
  • Telecommunication costs
  • Storage costs – on- or off-premise, or cloud
  • Support costs for maintaining assets and providing user support.

Having a full understanding of the costs your business faces to manage the IT function is important for accurate budgeting and planning for future growth.

Summary: should you develop an IT strategy?

Absolutely – and, to reiterate, it doesn’t need to be complex. The components we’ve discussed above are the core components needed to ensure your business is managing its technology to grow, improve, support and add value to its operations, both now and in the future.

Maintaining and managing an IT strategy doesn’t need to be an onerous task, and its one that we can help with.

The team at SouthEast IT has over 30 years’ experience in the IT industry, including IT consultancy. We can provide guidance on the best IT strategy for your type and size of business, so that you have all the information you need to make the right decisions.

We can also help with hardware procurement, cloud services, backup and disaster recovery, internet and networking, and a range of other IT solutions, so that you can focus on running and growing your business.

Need help with your business IT strategy?

SouthEast IT provides comprehensive IT service, support and advice for businesses of all sizes, and results oriented consulting services. Call us today to find out more about how we can support your business IT strategy – we’re always here to help.