Tariffs have a way of turning long-term business strategy into a short-term spreadsheet exercise.
Costs rise. Customers become more cautious. Margins tighten. Projects are delayed, budgets are frozen and every department is asked to find expenses it can eliminate.
Some of those decisions may be necessary. Every business should challenge waste, especially when economic conditions become less predictable.
The danger is treating every expense as if it has the same value.
Cutting an unused software licence is very different from delaying a critical security upgrade. Eliminating a redundant system is not the same as weakening your backup strategy. Automating repetitive work is not the same as removing people without fixing the broken processes consuming their time.
After 30 years of running a technology business through recessions, financial crises, a pandemic and several unpredictable markets, I have learned that across-the-board cost cutting is rarely a strategy. It is a blunt instrument.
The better question is not simply, “Where can we spend less?”
It is, “Where are we wasting money, where can we become more efficient and where must we continue investing to build a stronger business?”
That is a conversation finance, operations and technology leaders need to have together.
How Should Businesses Respond to Tariffs and Economic Uncertainty?
Businesses should respond by protecting cash flow, eliminating waste, improving productivity and preserving the capabilities they depend on to operate securely.
That means understanding what is actually driving costs before making cuts, improving inefficient processes before reducing capacity and creating more flexibility in how expertise and technology services are obtained.
The Bank of Canada has reported that tariffs and trade-policy uncertainty have increased costs and made businesses more cautious about investment. BDC has reached a similarly important conclusion: companies need to protect liquidity without abandoning the productivity investments that will determine their future competitiveness.
That distinction matters.
Stopping every investment may protect cash temporarily, but it can also leave the business less efficient, less secure and poorly positioned when conditions improve.
Start With What Is Actually Driving the Business
Before cutting anything, leaders need a clear picture of what is happening across the organization.
What is putting pressure on margins? Where is cash being tied up? Which costs are increasing? Where are employees losing time? Which systems are creating friction? Which investments are producing measurable value?
Without that visibility, budget reductions become guesswork.
Most businesses have more waste than they realize, but it rarely appears as one large and obvious expense. It hides in unused software licences, overlapping systems, manual processes, unnecessary administrative work and technology that was purchased for a good reason but never properly adopted.
It also appears when employees spend hours searching for information, copying data between systems, recreating the same reports or working around processes that have not been reviewed in years.
Each inefficiency may look small. Across dozens of employees and hundreds of transactions, the cost can become significant.
Technology can help leaders see where time and money are being lost, but the objective should not be to add more technology. Most companies already own more technology than they use effectively.
The goal is to simplify the environment, improve visibility and make better use of the systems the business already has.
Look for Productivity Before Simply Cutting Headcount
People are expensive, but so are bad processes.
In many organizations, capable employees spend hours building spreadsheets, searching for documents, re-entering information, chasing approvals and producing repetitive reports.
That is not an employee problem. It is an operating model problem.
Before deciding that the business has too many people, leaders should determine whether those people are being supported by efficient systems and sensible processes.
Automation and AI can create real value here. Sometimes the opportunity is straightforward. A company may already own Microsoft 365 but use only a fraction of its capabilities. Employees may still be emailing documents back and forth instead of collaborating securely in Teams or SharePoint. Reports may be created manually every week even though most of the work could be automated.
In other organizations, entire workflows across finance, sales, operations and customer service may need to be redesigned.
However, buying an AI tool is not the same as having an AI strategy. Giving employees licences without training, governance or a clear business objective is unlikely to produce meaningful transformation.
A responsible AI adoption strategy starts with the business outcome.
Will the investment save time? Reduce operating costs? Improve customer service? Increase the capacity of the existing team? Help leaders make better decisions?
If the answer is unclear, the business may be experimenting with AI, but it is not yet creating measurable value.
Understand the Full Cost of Technology Capability
Technology costs are often evaluated one line item at a time.
The salary of an internal employee is compared with the monthly cost of a service provider. A software subscription is evaluated separately from the labour required to manage it. A cybersecurity tool is purchased without considering who will monitor it, maintain it or respond when it generates an alert at two o’clock in the morning.
That can produce a misleading comparison.
The real cost of technology capability includes salaries, benefits, recruitment, training, management time, vacation coverage, after-hours support, security tools, documentation and access to specialized expertise.
A small internal team may be excellent at supporting employees and maintaining day-to-day systems, but it is unreasonable to expect one or two people to be experts in Microsoft 365, cloud infrastructure, networks, cybersecurity, compliance, business continuity, AI and long-term technology strategy.
This is where businesses should consider the operating model, not just individual positions.
Depending on the size and complexity of the organization, managed or co-managed IT services can provide access to a broader team for an investment comparable to the fully loaded cost of a small number of low- or mid-level internal resources.
That does not mean every business should outsource every technology function. Some organizations need a strong internal team. Others may be better served by a fully managed model. Many benefit from combining internal business knowledge with an external team that provides specialized expertise, additional capacity and coverage when needs change.
The important point is flexibility.
When conditions are uncertain, businesses need the ability to adjust capacity and access different skills without repeatedly recruiting, restructuring or expecting a small team to cover every discipline.
Know What You Cannot Afford to Cut
When cash becomes tight, technology upgrades, cybersecurity projects and business continuity initiatives are easy to postpone.
Nothing immediately appears to happen when an upgrade is delayed. The system still runs. Employees can still log in. The backup dashboard may still show a green checkmark.
The cost remains hidden until something fails.
An upgrade that seemed too expensive can suddenly look inexpensive compared with several days of downtime, lost revenue, frustrated employees and angry customers. A backup strategy that was never tested may fail at exactly the moment the business needs it most.
The same is true of cybersecurity.
Cybercriminals do not stop attacking because your margins are under pressure. Businesses dealing with staff changes, new suppliers, cost reductions and disrupted processes may become easier targets because normal controls are being changed or bypassed.
A compromised email account can redirect a payment. Ransomware can stop operations. An unprotected administrative account can expose critical systems. A poorly controlled AI tool can disclose confidential information without anyone realizing it has happened.
This does not mean every cybersecurity expense is untouchable. Businesses should still challenge overlapping products, unused tools and services that are not delivering enough value.
The distinction is between cutting waste and weakening the foundation.
One makes the company more efficient. The other simply makes it more vulnerable.
Make Finance and Technology Part of the Same Conversation
Technology decisions have financial consequences, and financial decisions increasingly depend on technology.
Yet in many businesses, these conversations still happen separately.
Finance looks at cash flow, margins, forecasts and expected returns. Technology leadership looks at system reliability, cybersecurity, productivity, automation and operational risk.
Each group is seeing part of the picture.
When they work together, the business can decide which systems should be eliminated, which processes should be automated, which expenses should be consolidated and which risks have become too expensive to ignore.
They can also look beyond the current quarter.
What will the business need over the next 12 to 24 months? Which systems will support that direction? Which limitations will prevent the organization from growing efficiently? Which investments will lower operating costs regardless of what happens with tariffs or the broader economy?
This is where experienced technology and cybersecurity leadership can make a significant difference.
A virtual Chief Information Officer helps connect technology investments to business priorities, budgets and measurable outcomes. A virtual Chief Security Officer helps leadership understand cybersecurity, compliance and operational risk so resources can be directed toward the areas that matter most.
The vCIO helps prevent the business from buying technology it does not need. The vCSO helps prevent it from ignoring risks it cannot afford.
Not every organization needs both positions as full-time executives. What every organization needs is access to that level of thinking when important decisions are being made.
Use the Expera Four-Part Technology Investment Test
When reviewing a technology budget, every significant expense should support at least one of four business outcomes:
1. Run
Does it keep the business operating reliably?
This includes employee support, core applications, infrastructure, connectivity, device management and maintenance.
2. Protect
Does it reduce a meaningful financial, cybersecurity, compliance or operational risk?
This includes identity security, threat monitoring, backups, business continuity, employee awareness and incident response.
3. Improve
Does it reduce waste, automate work or increase the capacity of the existing team?
This includes workflow automation, system integration, data improvements and practical uses of AI.
4. Grow
Does it help the business serve more customers, enter new markets, improve the customer experience or scale without costs increasing at the same rate?
This includes strategic cloud investments, collaboration platforms, data analytics and technology that supports new products or services.
If an expense cannot be connected to running, protecting, improving or growing the business, it should be challenged.
If it supports one of those outcomes, the next question is whether the company is receiving enough value and whether the capability could be delivered more efficiently.
This is a much more useful exercise than telling every department to cut the same percentage.
Build Flexibility Into the Operating Model
No one can predict exactly what tariffs, interest rates, customer demand or the broader economy will look like a year from now.
Businesses do not need a perfect forecast, but they do need the ability to adjust.
That may mean consolidating systems, negotiating more flexible contracts, combining internal and external expertise, moving from large unpredictable projects toward planned monthly investments or using automation to increase capacity without adding overhead at the same rate.
It may also mean questioning the assumption that every important capability requires another permanent hire.
The objective is not to eliminate internal expertise or outsource for the sake of outsourcing. It is to create an operating model that gives the business access to the right skills without carrying more fixed overhead than conditions can support.
That flexibility becomes particularly valuable when the organization needs different expertise at different times. One quarter may require a cloud migration. The next may involve a cybersecurity assessment, an AI project, a compliance requirement or a major system upgrade.
Building each capability internally may not be realistic. Going without it can be equally dangerous.
Build for What Comes Next
Tariffs may be the immediate concern, but they often expose weaknesses that were already present.
Poor visibility into costs. Too much manual work. Disconnected data. Outdated systems. Weak cybersecurity. No technology roadmap. A small IT team expected to know everything. AI being adopted without a clear strategy or proper controls.
Those problems are easier to tolerate when revenue is growing and margins are healthy. They become much harder to ignore when conditions tighten.
That makes this an opportunity to simplify the technology environment, eliminate waste, automate repetitive work, strengthen cybersecurity and create more flexibility in how the business obtains expertise.
The goal should not be to spend as little as possible.
It should be to make sure every important investment helps run, protect, improve or grow the business.
Reducing unnecessary costs is responsible management. Cutting away the capabilities the company will need to operate, compete and grow is something entirely different.
The businesses that emerge strongest will not necessarily be the ones that cut the most. They will be the ones that understand where technology creates value, protect the foundations they depend on and build enough flexibility to adapt as conditions change.
Contact Expera IT to discuss your technology roadmap, cybersecurity strategy or options for creating a more flexible IT operating model.
