ICT solutions for South African businesses: what to invest in and what it costs

ICT, short for information and communications technology, covers every system a business uses to work, communicate and sell: devices, networks, cloud services, software, data and the security around all of it. For years IT and marketing were separate departments with separate budgets. That line has gone: the same data now runs operations, customer service and advertising, so the decisions have to be made together.

This guide explains the layers of ICT a South African business needs, which investments to prioritise, what POPIA requires, and what managed IT and related services typically cost.

What are ICT solutions for business?

ICT solutions are the technology services that keep a business running and growing. They fall into five layers, and problems in a lower layer limit everything above it: a CRM is no use if laptops are unpatched and the internet goes down every afternoon.

Which ICT investments matter most for a South African business?

Start from the bottom layer and work up. For most small and medium businesses the order of priority is:

1. Secure, managed devices with automatic updates and working backups.
2. Cloud productivity, such as Microsoft 365 or Google Workspace, so email and files are not tied to one machine.
3. Connectivity and power resilience: a backup internet connection and uninterruptible power for network equipment, so work continues through outages.
4. Connected business systems, so enquiries flow from the website into the CRM and invoices into accounting without manual re-entry.
5. Data and automation: reporting the business can trust, and automated follow-up so leads are answered in minutes.

What does POPIA require from your IT?

The Protection of Personal Information Act (POPIA), enforceable since 1 July 2021, requires every business that processes personal information to secure it with appropriate, reasonable technical and organisational measures, and to notify the Information Regulator and the affected people when that information has been compromised. In practice that turns basic IT hygiene into a legal obligation.

• Multi-factor authentication on email and every system that holds client data.
• Automatic security updates on all devices and software.
• Endpoint protection on every laptop and desktop.
• Backups kept separately from the systems they protect, and tested regularly.
• Access limited to the people who need it, and removed when staff leave.
• Staff training to recognise phishing, the most common way attacks start.

Should a business move to the cloud?

For most South African businesses, yes, for email, documents and many business applications. Cloud services remove the cost and risk of maintaining servers in the office, make remote and hybrid work straightforward, and keep running when the office has no power. The cost model changes from buying hardware every few years to a predictable monthly fee.

Data location used to be a reason to hesitate. It is less of one now: Microsoft Azure has run data centre regions in Johannesburg and Cape Town since 2019, Amazon Web Services opened a Cape Town region in 2020, and Google Cloud launched a Johannesburg region in 2024. Workloads that need specialised hardware or very low latency to on-site equipment may still belong on premises. Our cloud solutions team can help you decide what moves and what stays.

How much does managed IT cost in South Africa?

Managed IT support in South Africa typically costs between R250 and R1,500 or more per user per month, excluding VAT, depending on whether support is remote only, includes guaranteed response times and covers on-site visits. Businesses that prefer a fixed fee usually pay R5,000 to R25,000 a month for capped, predictable IT operations. These are Lulonke’s published ranges.

Work outside the agreed scope is usually charged hourly; our standard technician rates are R650 to R950 an hour in business hours and R1,200 to R1,600 or more after hours. See managed IT for the full service.

How do marketing and advertising technology fit into ICT?

Marketing technology (MarTech) and advertising technology (AdTech) now depend on the same infrastructure as the rest of the business. Measuring which ads produce customers requires tracking that survives browser privacy changes, server-side connections such as Meta’s Conversions API, a CRM that records where each lead came from, and consent handling that respects POPIA. When IT and marketing plan separately, the result is usually broken tracking and ad budgets that cannot be traced to revenue.

The fix is to treat the website, CRM, analytics and ad platforms as one connected system. Our integrations and marketing intelligence work is built around exactly that.

Where do automation and AI fit?

Once systems are connected, automation removes the repetitive work between them: routing leads to the right person, sending follow-ups, creating invoices and updating records. AI agents extend this to conversations, for example answering routine customer questions on WhatsApp and handing complex ones to staff. Our WhatsApp AI agents start at R25,000 to set up and R6,500 a month. See automation for what can be automated first.

How should you plan an ICT roadmap?

1. Audit what you have: devices, accounts, software, where data lives and who can access it.
2. Fix the risks first: backups, updates, multi-factor authentication and the POPIA basics.
3. Take the quick wins: cancel unused software and move email and files to the cloud if they are not there yet.
4. Connect the systems you already pay for before buying new ones.
5. Measure what matters, such as response times, downtime and cost per lead, and review it every quarter.

If you would rather have this mapped for you, a growth assessment covers technology, data and marketing together.