HowmuchdoesCybersecuritycostinBiyamitiBushveldCamp?

Reactive break-fix runs R500–R1,200 per hour. Managed services (MSP) retainers are R350–R650 per workstation per month for proactive monitoring, patching, AV, and helpdesk. Pricing typically excludes hardware. Most MSPs require a minimum 12-month term and 30 days' notice — clarify before signing.

No — the Responsible Party (your business) carries POPIA accountability under sections 11 and 17. The IT vendor is an Operator (section 21) and is contractually bound by a written processing agreement. You still need an Information Officer registered with the Information Regulator. The vendor cannot register on your behalf.

POPIA section 72 doesn't mandate local hosting but it requires the destination country to have similar protection — or your data subject's consent. AWS Cape Town (af-south-1), Azure Johannesburg, and Teraco regions are the easy compliant choice. Hosting in the EU is also POPIA-compatible due to GDPR equivalence.

A WordPress brochure site with custom design runs R25,000–R80,000. A bespoke Next.js or Laravel build with integrations (CRM, payment, custom dashboards) is R150,000–R400,000+ depending on scope. SaaS integration projects (Salesforce, HubSpot, Xero) bill R850–R1,400 per hour. Always ask for a scope-of-work document before sign-off.

Look for: source code escrow or full IP transfer on payment, a defects-warranty period (typically 30–90 days post-go-live), documented APIs and deployment runbooks, and a handover sprint. Ask whether they're CIPC-registered (many freelance devs aren't), VAT-vendor (if turnover > R1m), and whether they hold professional indemnity cover.