Trois-Rivières, serving all of Quebec 450 231-3836 info@oktosolutions.ca
FR

vCIO

Three-year IT master plan: hardware lifecycle, budget and prioritization

Without a plan, a small business’s IT is decided on the fly: you replace what breaks, you buy what is urgent, and the budget moves without a clear reason. A three-year IT master plan puts decisions back in order and makes the spending predictable. This page explains what it contains, how it is built and how it is kept up to date.

Presenting an IT master plan to a client in a meeting room

An IT master plan is not a twenty-page document you read once. It is a short roadmap that states the condition of your fleet, the replacements and projects planned over three years, the order to run them in, and what that represents in spending per year. It is reviewed at every strategic meeting.

In brief

The IT master plan in three points

An IT master plan is not a twenty-page document you read once. It is a short roadmap, sized in effort and priority order, that is reviewed at every strategic meeting.

What it is

The state of your fleet and your systems, the replacements and projects planned over three years, the order to run them in, and what that represents in spending per year.

Who it is for

Small businesses without an in-house IT director, that still have to defend a budget, plan a fleet refresh or justify an investment to a board of directors.

What it changes

Replacements stop landing all at once, projects are no longer decided in a rush, and leadership knows in advance what is coming next year.

Understanding

Why a small business needs a three-year plan

IT hardware is bought in waves. A small business that outfitted its team in the same year will see those workstations age in the same year, and end up with concentrated spending no budget had planned for. The same pattern happens with servers, switches, firewalls and multi-year licences.

The three-year plan first serves to smooth those waves. It then helps to decide among requests that all arrive marked urgent: replace a server, migrate to the cloud, add security, change a business application. Without a plan, the most recent request wins. With a plan, the one with the largest effect on the organization wins.

Three years is the useful horizon for a small business: long enough to cover a fleet refresh cycle, short enough to stay credible. The plan is reviewed at every strategic meeting, because a plan that is never revised becomes wrong within a few months.

Strategy meeting and note-taking on a client’s IT master plan

Contents

What an IT master plan contains

The document is a few pages long and covers six areas. Each one answers a question that leadership is already asking itself.

Inventory and age of the fleet

What it is. The real list of workstations, servers, network equipment and software, with their age, their vendor end-of-support date and their state.

The question it answers. What do we actually own, and what is nearing end of life soon.

Replacement schedule

What it is. Replacements spread over three years, smoothing the waves instead of enduring them, with the groupings that make sense.

The question it answers. How many devices do we need to replace each year to avoid hitting a wall.

Projects and their order

What it is. Upcoming projects, each with its objective, its dependencies and the order in which they should happen, because some make others possible.

The question it answers. Where do we start, and what can wait without risk.

Budget by year

What it is. The annual split of the spending, separating what is recurring from what is a one-time investment, in a format that fits into your existing budget.

The question it answers. How much should we plan for next year, and why.

Risks to address

What it is. Known weaknesses that must be fixed within the plan’s horizon, with what they imply if nothing is done, including compliance obligations.

The question it answers. What is exposing us today, and in what order should we address it.

Dependencies and vendors

What it is. Contracts, renewals, deadlines and the points where the organization depends on a single vendor, a single application or a single person.

The question it answers. Where are we locked in, and when can we get out.

How it unfolds

How the plan is built with you

The plan is built in four steps, then it lives. It is reviewed at the strategic meetings scheduled in the vCIO module, at a cadence set by the level you choose.

  1. Understand the organization before the ITWhere the company is heading over the next three years: growth, new locations, hiring, a change of business software, new obligations from a client or an insurer. A plan built without this information plans the wrong fleet.
  2. Establish the real stateFull inventory, hardware age, end-of-support dates, active contracts, dependencies, known risks. This is the factual starting point, and often the first time the organization sees it all on a single page.
  3. Rank and spreadEach item gets a priority based on its effect on operations and its risk, then is placed into one of the three years. Replacements are deliberately spread out to smooth the spending.
  4. Present, adjust, reviewThe plan is presented to leadership, adjusted to what is realistic for your organization, then reviewed at every strategic meeting. A plan that never moves is not followed, it is forgotten.

What it delivers

What changes once the plan is in place

The effects show quickly, and they are most visible for leadership and finance.

  • Replacements are spread out instead of all landing in the same year
  • Next year’s IT budget is known before the fiscal year begins
  • An urgent request is compared to what was already planned, rather than piled on top
  • End-of-support dates are anticipated instead of discovered on the day the vendor stops shipping patches
  • Security investments are justified by a named risk, not by fear
  • Leadership can explain its IT choices to the board, the insurer or the bank
  • The departure of the person who knew the fleet stops being a risk, because everything is written

Where this sits

The central deliverable of the vCIO service

The IT plan is the central deliverable of our vCIO services: a dedicated advisor keeps it current, quarter after quarter. It leans on the facts produced by a cybersecurity audit, and it is what turns a list of findings into a schedule. Day-to-day execution belongs to our managed IT services. If you are still comparing providers, our guide on how to choose a managed IT provider lists the criteria that matter.

This service is delivered across Quebec. Our office is in Trois-Rivières. We work remotely and travel on site when the mandate calls for it. See Trois-Rivières, the Mauricie, Montreal and Quebec City.

Further reading: managed IT or an in-house technician, a UPS against power outages and custom software or off-the-shelf.

Questions and answers

Frequently asked questions about the IT master plan

What is a vCIO, exactly?
A vCIO is a shared-time IT leader: someone who plays the role of technology lead for your organization without being a full-time employee. They do not replace the team that fixes day-to-day problems. They handle planning, budgeting, prioritization, vendor management and strategic meetings. See our vCIO service.
How long does it take to produce a master plan?
It depends mostly on the quality of the existing inventory. If your fleet is already managed and documented, most of the work is the analysis and the presentation meeting. If we have to first discover what you own, the inventory step lengthens the schedule. We give you a date after seeing the size of your environment.
Why three years rather than five?
Three years is roughly the fleet refresh cycle in a small business, and it is the horizon beyond which assumptions become unreliable. The OKTO vCIO module plans a horizon of twelve to thirty-six months depending on the level chosen, with a roadmap reviewed regularly rather than a frozen document.
Does the plan include dollar amounts?
The plan splits the spending by year and separates recurring cost from one-time investment, so you can carry it into your budget. The amounts are set with you during the mandate, from your real fleet: they do not appear on this site and they are not generic.
Do we have to be a managed services client to have a master plan?
The master plan is part of the vCIO module, which adds to a main package. The Complete package includes an IT master plan with a roadmap. If you only want the planning exercise, tell us about your situation and we will say honestly whether our model fits. See our plans.
How often is the plan reviewed?
At every strategic meeting scheduled in the vCIO module. Depending on the level chosen, these meetings are semi-annual or quarterly, and the roadmap is adjusted based on what has changed in the organization since last time.
Where do we start if we have nothing documented?
By the inventory. Our cybersecurity audit already produces much of that information, especially on the fleet, the accesses and the backups. The master plan then takes those findings and spreads them over time. The projects that come out most often are the fleet refresh, Microsoft 365 backup and secure remote work.

Put your IT on a plan

We start by understanding where your organization is heading, then we assess the real state of your fleet. You leave with a three-year roadmap you can present to your leadership.