The cost of an IT project is rarely limited to the development fee alone. The final number is affected by dozens of expense items across different stages of the product lifecycle. Below is a structured checklist to help you see the full picture, avoid missing anything, and manage the budget intentionally.
1. Pre-project stage
- Sales and presales: account management time, presales engineers, architect input on the RFP, pilots, demos, PoC.
- Pre-contract analysis: interviews, building a high-level backlog, risk assessment.
- Legal review: contract negotiation, SLA, DPA, information security requirements alignment.
- Product strategy consulting: benchmarks, competitive analysis, value hypotheses.
These costs are often classified as overhead, but in project accounting it makes sense to allocate them to the contract.
2. Research and design
- Business analysis: CJM, AS-IS/TO-BE, requirements, specifications, acceptance criteria.
- UX research: in-depth interviews, usability testing, prototyping, design system.
- Architecture: stack selection, integration boundaries, diagrams, nonfunctional requirements.
- Estimation and planning: WBS, story points, roadmap, release plan, risk matrix.
3. Development
- Team: frontend, backend, mobile, full-stack, data engineers, ML, DevOps, SRE.
- Practices: code reviews, pair programming, internal meetups, spike research.
- Tools: IDEs, paid plugins, repositories, task management, SDK licenses.
- Environments: local, dev, test, stage, prod. Infrastructure duplicated for each environment.
4. Testing and quality
- Functional testing: manual test cases, regression testing.
- Automated tests: unit, API, UI, mobile device farms, test framework maintenance.
- Nonfunctional testing: performance, load, security, fault tolerance.
- QA infrastructure: test environments, data control, masking, test users and directories.
- UAT: support for customer acceptance, defect logging, rework.
5. Integrations and data
- Connecting external services: payments, KYC, maps, email campaigns, analytics.
- Vendor licenses and transaction fees.
- ETL/ELT: pipelines, data marts, data quality, catalog, data lineage.
- Migrations: export from legacy systems, transformation, validation, parallel run.
6. Infrastructure and operations
- Cloud: compute, storage, network traffic, load balancers, queues, CDN.
- Managed services: databases, caches, container clusters, functions.
- CI/CD: build, artifacts, runners, static analysis, container registries.
- Observability: logging, metrics, tracing, APM, alerts, dashboards.
- Backups and DR: geo-redundancy, regular recovery tests, DR plans.
- Certificates and domains: renewals, validation, HSM where needed.
7. Security and compliance
- Threat modeling and secure development: SAST, DAST, SCA, secrets, SBOM.
- Pen tests and code audits.
- Policies and processes: vulnerability management, updates, incident management.
- Standards compliance: ISO 27001, GDPR, PCI DSS, local requirements.
- IDM and IAM: SSO, MFA, roles, privileged access, logging.
8. Project management and communications
- Project management: sprint rituals, reports, risk register, budget control.
- Deliveries and releases: release management, change advisory, feature flags, dark launches.
- Stakeholder engagement: demos, workshops, expectation management.
- Documentation: architecture decisions, guidelines, user and technical docs.
- Localization and accessibility: i18n, a11y, regional legal requirements.
9. Support and maintenance
- L1-L2-L3: on-call coverage, runbooks, SLA response and recovery times.
- Version maintenance: framework updates, security patches.
- Improvements and technical debt work: addressing tech debt, refactoring, optimizations.
- Training and knowledge transfer: onboarding the customer team, guides, videos, workshops.
10. Managerial and administrative overhead
- HR and recruiting: hiring, onboarding, replacements, probation periods.
- Finance and operations: accounting, currency risk, payment fees, bank guarantees.
- Office and depreciation: workstations, equipment, test devices.
- Corporate subscriptions: communications, design, and analytics services.
- Business travel and meetings: offsite sessions, offsites, partner coordination.
11. Risks and contingencies
- Technical risks: vendor dependency, niche expertise, unstable APIs.
- Product risks: uncertainty around hypotheses, shifting priorities.
- Legal risks: delays in approvals, regulatory changes.
- Risk reserve: a percentage of the budget for unexpected work.
- Inflation and exchange-rate differences: especially when paying in multiple currencies.
12. Pricing models
- Time & Material: hourly billing. High flexibility, client bears the risk, transparent tracking is required.
- Fixed Price: a fixed fee for scope and outcome. Requires clear requirements and a risk buffer.
- Dedicated Team: a fixed monthly rate for the team. Good for long roadmaps.
- Outcome-based: bonuses for KPIs, shared savings, revenue share. Clear metrics and auditability are required.
They are often combined: the core is T&M, critical increments are fixed price, support is subscription-based.
13. Typical cost breakdown
13.1 Direct costs
- Project team payroll: rate × utilization × period.
- Contractors and experts: fixed fee or hourly rate.
- Project infrastructure: cloud costs by environment and average daily usage metrics.
- Licenses and transactions: SDKs, APIs, provider fees.
- Test devices and environments.
13.2 Indirect costs
- Management overhead: a percentage of payroll.
- Subscriptions and office: allocated per-person monthly rate.
- Risks: reserve as a percentage of direct costs.
- Taxes and fees: VAT, withholding, duties.
- Margin: target gross margin.
13.3 Formula Example
Project_Cost = Direct_Costs + Indirect_Overhead + Risk_Reserve + Taxes + Vendor_Profit
For T&M, a blended rate is often calculated:
Blended_rate = (Σ role_i.rate_i × time_share_i) / Σ time_share_i Monthly_Budget = Blended_rate × number_of_FTE × number_of_months
14. Cost Drivers and Optimization Levers
- Requirements and scope: clear prioritization, MoSCoW, MVP, hypotheses validated through experiments.
- Code quality: test automation, CI/CD, standards, lower total cost of ownership.
- Architecture: modularity, reusability, selection of managed services.
- Infrastructure: reserved instances, rightsizing, spot instances, archive storage classes, lifecycle policies.
- Integrations: minimize paid third-party calls, caching, batching.
- Team: seniority as a multiplier, but balance cost and risk.
- Processes: short cycles, early hypothesis validation, transparent flow metrics.
- Documentation and knowledge: reduce the cost of changes and onboarding.
15. What Must Be Included in the Estimate
- Requirements clarification and upfront analysis.
- Maintaining the design system and guidelines.
- Automated tests and coverage of critical paths.
- Observability and budget for logs and metrics.
- Security: SAST/DAST/SCA, secrets management.
- Performance plan: target SLOs, load testing.
- Reserve for regulatory changes.
- Post-release support and warranty period.
- Reserve for downtime and key specialists' vacations.
16. Mini Estimate Template
- Team by role: hours, rates, cost.
- Infrastructure by environment: dev, test, stage, prod.
- Licenses and subscriptions: monthly and per transaction.
- Integrations: implementation and operating cost.
- Testing: share of manual vs. automated, device farm.
- Security: scanners, pentest, remediation.
- Documentation and training: scope, format.
- PMO: management, reports, communications.
- Risks and reserves: percentages and rationale.
- Taxes and margin: a transparent line item.
17. Conclusion
The cost of an IT project is made up of a chain of work from presales through support, where direct development costs often represent only part of the total. Include analysis and operations, security, risk reserves, overhead, and taxes. A transparent structure, regular review of assumptions, and management of cost drivers make it possible to keep the budget under control and consciously choose trade-offs between speed, quality, and price.