How much does an IT audit cost in Australia?

The market ranges

Big Four technology assessments are built for large enterprise: engagements commonly start in the hundreds of thousands and run months. Excellent work, priced for the ASX100.

Boutique consultancies and scoped discovery audits typically land between $30,000 and $60,000 for a six-week engagement, depending on environment size and depth.

MSP-bundled 'reviews' are often cheap or free, because they are marketing: the assessor profits from the remediation, so the price of the review is subsidised by the findings it is designed to produce.

What actually drives the price

• Seat count and site count: more users and locations mean more contracts, licences and systems to test
• Scope depth: cost-only reviews are cheaper than combined cost, risk and strategy assessments
• Data condition: organisations that can produce contracts and invoices quickly cost less to audit
• Independence: genuinely independent firms must charge for the work itself, because there is no remediation revenue behind it

Worked examples by business size

• 60-seat professional services firm, single site, one MSP: boutique scoped review $25,000-$40,000; MSP-bundled 'assessment' free-with-strings; our fixed fee $8,000-$9,000
• 120-seat business, two sites, MSP plus internal IT: boutique engagement $35,000-$55,000; Big Four not economically sensible; our fixed fee $10,000-$12,000
• 200-seat regulated organisation, multi-entity: boutique $45,000-$70,000; Big Four entry point $250,000+; our fixed fee $13,000-$15,000

Cost by audit type

• Cyber-only assessment (Essential Eight style): commonly $10,000-$30,000 in the AU market depending on depth and evidence testing
• Cost/spend review alone: $15,000-$40,000 boutique, often subsumed into larger advisory engagements
• Technology due diligence for M&A: $20,000-$80,000+ scoped to the transaction
• Combined cost + risk + governance audit (what we run): market $30,000-$60,000; our fixed fee $8,000-$15,000 with the guarantee doing the risk reversal

What we charge

Our 4-Week Commercial IT Health Check is a fixed fee scoped on seat count and complexity: $8,000 to $15,000 for a typical mid-market organisation of 50 to 200 seats. That covers cost, risk and governance in one engagement, with board-ready output.

It carries a written guarantee: if the audit does not identify value improvement opportunities worth at least twice the fee, we refund it. That is the honest answer to 'is it worth it': if it is not, you do not pay.