What It Actually Costs When Nobody Owns IT

Nobody wakes up and decides to ignore IT. It just kind of happens. You're a 30-person company. Things mostly work. When they don't, someone figures it out. It's fine.

Except it's not fine. You're spending money you don't see, taking risks you don't measure, and losing time you can't get back. Here's what it actually costs when nobody owns IT at your company.

The founder tax

This is the biggest hidden cost, and it's the easiest to calculate.

Let's say you're a founder or ops lead who handles IT because nobody else will. Password resets. Tool provisioning for new hires. Figuring out why someone can't access a shared drive. Troubleshooting Zoom. Responding to that security questionnaire from a potential customer.

Conservatively, that's 5 hours a week. Some weeks it's more.

Your time is worth something. If your hourly opportunity cost is $200 (conservative for most founders), those 5 hours cost $1,000 per week. That's $4,000 per month or $48,000 per year. Spent on password resets.

And here's the part that doesn't show up in the math: every hour you spend on IT is an hour you're not spending on product, customers, hiring, or strategy. The things only you can do.

I've seen founders spend entire Sundays setting up a new employee's accounts because they didn't have time during the week. That's not sustainable. It's not even rational. But it happens all the time.

SaaS waste

The average company wastes 25-30% of its SaaS spend on unused licenses. Let me make that concrete.

A 50-person remote team typically spends $2,000-3,000 per month on SaaS tools. That includes Slack, Zoom, Notion, Figma, Google Workspace, project management tools, and various other subscriptions.

At a 25% waste rate, you're throwing away $500-750 per month. That's $6,000-9,000 per year. On tools nobody is using.

Where does the waste come from?

Ghost accounts. People leave the company but their licenses stay active. Nobody remembers to cancel them. Over 12 months, this adds up to thousands.

Duplicate tools. The engineering team uses Linear. The product team uses Asana. Marketing uses Monday. Everyone uses Notion. You're paying for four project management tools when you need one.

Unused seats. You bought a 50-seat Figma plan but only 20 people use it. The per-seat cost is locked in, and nobody has downgraded.

Auto-renewals nobody reviews. That tool you signed up for 18 months ago with a free trial? It's been charging your company card $200/month since the trial ended. Nobody noticed because it's on a shared card.

Without someone actively managing your SaaS stack, waste is the default. Tools accumulate. They never get cleaned up.

Security incidents

This is the cost that's hardest to see until it's impossible to ignore.

The average cost of a data breach for a small business ranges from $120,000 to $1.24 million, depending on the study and the severity. But you don't need a headline-grabbing breach for this to hurt.

Consider the more common scenarios:

Scenario 1: Compromised email. An employee's Google account gets compromised because they're using a weak password and MFA isn't enforced. The attacker sends invoice redirect emails to your customers from a legitimate email address. One customer pays $25,000 to a fraudulent account before anyone notices. Cost: $25,000+ plus legal fees, customer trust damage, and the time to investigate and remediate.

Scenario 2: Stolen laptop. An employee leaves their laptop in a cab. The drive isn't encrypted because nobody set up MDM. The laptop contains customer data, internal financials, and saved passwords in Chrome. Cost: notification obligations, potential regulatory fines, credit monitoring for affected individuals, and massive reputational damage.

Scenario 3: Ex-employee access. Someone you laid off three months ago still has access to your Notion, Slack, and customer database. They download your customer list and take it to a competitor. Cost: legal fees, lost competitive advantage, and the realization that your offboarding process doesn't exist.

None of these are exotic scenarios. They happen every week at small companies. The only question is whether you've taken the basic steps to prevent them.

Onboarding delays

A new hire starts Monday. Their Google account doesn't exist yet. Nobody set up their Slack. They don't have access to the tools they need. Their laptop arrived but nobody configured it.

Day one is wasted. Maybe day two as well. If you're lucky, they're productive by Wednesday.

At a fully-loaded cost of $400-600 per day for a typical knowledge worker, two lost days costs $800-1,200. Multiply that by 20 hires per year and you're looking at $16,000-24,000 in lost productivity. Just from slow onboarding.

And that's only the financial cost. The experience cost matters too. Nothing says "this company doesn't have their act together" like a new hire sitting around waiting for accounts on their first day. It sets the tone for the entire employment relationship.

Companies with a documented onboarding process and someone responsible for executing it get new hires productive on day one. Every time.

Employee frustration

Remote employees deal with IT friction constantly when nobody owns it. Slack channels fill up with "does anyone know how to..." messages. People create workarounds that create more problems. Simple things take too long.

This friction compounds. A 2023 survey by Gartner found that IT friction is one of the top drivers of poor employee experience, especially in remote-first environments. When people can't get basic help with their tools, they get frustrated. Frustrated employees are less productive and more likely to leave.

Replacing an employee costs 50-200% of their annual salary (depending on the role). If IT frustration contributes to even one departure per year, the cost dwarfs any investment in proper IT support.

Compliance risk

Here's a scenario that plays out regularly: your sales team is about to close a $200,000 deal. The customer sends over a security questionnaire. It asks about your encryption policies, access controls, incident response plan, device management, and MFA enforcement.

You don't have good answers. You scramble to fill it out, knowing half your responses are aspirational rather than accurate. The customer's security team reviews it and has follow-up questions you can't answer confidently.

The deal stalls. Maybe you lose it entirely. Maybe you close it but with a much longer sales cycle because trust had to be rebuilt.

This is increasingly common. Enterprise customers, healthcare organizations, and financial services companies all require vendors to demonstrate basic security controls. If you can't, you either lose the deal or delay it significantly.

The cost of a lost deal is obvious. The cost of a delayed deal is less obvious but real: every month the deal slips is a month of revenue you don't collect.

Adding it up

For a typical 50-person remote company:

• Founder time: $48,000/year
• SaaS waste: $6,000-9,000/year
• One minor security incident: $10,000-50,000
• Onboarding delays (20 hires): $16,000-24,000/year
• Employee turnover (1 attributable departure): $50,000-100,000
• Lost or delayed deals: varies, but potentially hundreds of thousands

Total annual cost of doing nothing: conservatively $130,000-230,000.

A flat monthly retainer for someone to manage all of this is a fraction of what you're already losing. The math isn't close.

The real comparison

This isn't about spending more money. It's about redirecting money you're already spending (poorly) into something that actually works.

You're currently paying for IT management. You're just paying for it with founder time, security risk, SaaS waste, and employee frustration instead of with a budget line item.

A dedicated IT person (whether full-time, fractional, or through an MSP) eliminates the waste, reduces the risk, and frees the founder to do founder things.

If you want to see what this looks like for your specific situation, book a free call. I'll walk through your current setup and give you an honest assessment of where you're spending more than you realize.