The Cyber Security Agency of Singapore found that 68% of SMEs experienced at least one significant IT disruption in 2024. The average cost to recover: SGD 8,000 per incident. That figure does not include staff hours lost while people waited for systems to come back, revenue not earned while a critical system was down, or reputational cost if the disruption affected a client-facing service.
It also does not account for the fact that emergency IT work costs 2–3 times more than planned maintenance. An unplanned callout means an engineer drops everything, travels to your office, and diagnoses a problem under pressure — compared to a scheduled visit where the same work happens methodically and at a fixed monthly cost.
Most of the IT failures we see in Singapore SMEs were not sudden. They were preventable. A disk showing pre-failure warnings for three months. A firewall subscription that lapsed because nobody was tracking renewal dates. A UPS battery that would not have lasted two minutes in a power cut. A backup job that had been failing silently for six weeks.
Preventive maintenance is the discipline of catching these things before they become incidents.
Reactive vs Preventive: What the Cost Difference Looks Like
Break-fix IT support works like this: something fails, you call your IT person or provider, they fix it, you pay. The cost of each incident includes the engineer's time (typically SGD 120–300/hour for emergency callout rates in Singapore), any hardware that needs replacing at short notice, and however many hours your staff sat idle or worked around the problem.
For a business with two significant IT incidents per year at SGD 600 each in labour alone — before hardware, before downtime — that is SGD 1,200 in reactive spend. Add in the staff time lost: a team of 20 people losing half a day each in an outage is 10 staff-days of lost productivity.
Preventive IT maintenance works differently: a monthly retainer covers monitoring, scheduled visits, patch management, backup checks, and the early detection of problems before they become outages. Cost for a Singapore SME: SGD 300–1,500 per month depending on environment size and scope.
The honest comparison is not just the maintenance fee. It is maintenance fee versus (incident cost × incident frequency) plus downtime cost. For most Singapore SMEs with mixed infrastructure, preventive maintenance pays for itself within the first year.
What Preventive IT Maintenance Actually Covers
A good preventive maintenance programme covers seven areas. Many providers claim to do "proactive IT support" but only monitor for headline events. These are the specifics.
1. Hardware health monitoring Server disk health via S.M.A.R.T. data — pre-failure warnings appear weeks before a disk dies. CPU temperature and fan speeds. Memory error counts. RAID integrity. Network switch port errors. UPS battery health and estimated runtime. None of these require manual inspection if you have remote monitoring — they need someone to actually check the reports.
2. OS and firmware patching Monthly patch cycle for Windows Server, Windows workstations, and macOS. Firmware updates for firewalls, switches, and access points on a quarterly basis — or immediately when a critical vulnerability is disclosed. Patch status reporting so there is a record of what is current and what is pending.
3. Backup verification Not just "did the backup job run green." Actual restore testing — restore a file, restore a VM, confirm the recovery point objective is being met. Monthly backup reports showing job success rate, data volume, retention, and whether the off-site copy is current. This is the most commonly neglected area in reactive IT environments.
4. Certificate and subscription tracking SSL certificates, domain names, security software subscriptions, firewall subscriptions, UPS warranties, and hardware warranties all have expiry dates. When they lapse quietly, the consequences range from browser warnings (certificates) to unprotected endpoints (lapsed antivirus) to warranty claims refused (expired support contract). A preventive maintenance programme tracks all of these with 60 and 30-day renewal alerts.
5. Access control audit Who has admin access to your systems? Are there accounts for staff who left three months ago? Is MFA enforced on all admin accounts? Access control audits should happen at minimum quarterly — monthly in environments where staff turnover is high. Dormant accounts are a persistent low-effort entry point for attackers.
6. Capacity monitoring Disk space trends. Network bandwidth utilisation. Server CPU and RAM headroom. The goal is not just knowing current utilisation — it is identifying the trajectory so you can plan before something hits a limit.
7. Network and connectivity checks Router and switch uptime. Interface error rates. Wireless client health. Any device showing degraded performance that has not yet caused a visible outage.
A Practical Maintenance Schedule
This is what a structured preventive maintenance calendar looks like for a Singapore SME with a server environment, network infrastructure, and 20–80 workstations.
Monthly
- Review patch status across all devices and action outstanding patches
- Check backup job logs and verify at least one restore per month
- Review monitoring alerts from the previous 30 days
- Check disk health across all servers and storage
- Confirm firewall, AV, and security subscription status
- Review capacity trends (disk, CPU, RAM, bandwidth)
- Send client a monthly health report
Quarterly
- Firmware updates for network equipment (switches, firewall, APs)
- UPS battery test — run a test discharge and measure actual runtime
- Access control audit — review admin accounts, MFA compliance, dormant users
- SSL certificate and domain expiry check — flag anything within 90 days
- Asset register update — new devices added, disposed devices removed
- Physical site visit: check cable tidiness, equipment ventilation, server room temperature, physical access to networking gear
Annual
- Full disaster recovery test — simulate server failure, restore from backup, measure actual RTO
- IT policy review — password policy, acceptable use, device management, offboarding procedure
- Refresh planning — flag any devices approaching end of life or end of support in the next 12 months
- Vendor contract review — ISP, Microsoft 365, cloud subscriptions, hardware warranties
- Security review — broader look at access controls, network segmentation, endpoint protection coverage
What Preventive IT Maintenance Costs in Singapore
Pricing varies by device count, server complexity, SLA requirements, and on-site visit frequency. These are planning ranges.
| Environment | Typical Monthly Cost | What Is Included |
|---|---|---|
| Cloud-first, under 20 devices, no servers | SGD 300–600 | Remote monitoring, patch management, backup check, quarterly report |
| SME with 1–2 servers, 20–50 devices | SGD 600–1,500 | Above plus server monitoring, firmware patching, UPS check, monthly report, quarterly site visit |
| Hybrid environment, 2–5 servers, 50–100 devices | SGD 1,500–3,500 | Above plus more frequent site visits, disaster recovery testing, compliance-adjacent reporting |
| Complex environment with compliance requirements | SGD 3,500–8,000+ | Full scope, dedicated account engineer, SLA-backed response times |
Project work — server upgrades, firewall replacements, network redesigns, migrations — is typically scoped separately. Preventive maintenance covers ongoing health and monitoring, not one-off infrastructure projects.
Emergency callout rates in Singapore for unplanned incidents: SGD 120–300/hour, often with a minimum 2-hour charge and a travel surcharge. If your environment requires two callouts per year, the annual cost of reactive support plus disruption often exceeds the cost of preventive maintenance.
What We Typically See When Starting a New Client Engagement
When Aggasys takes on a new maintenance client in Singapore, the initial assessment almost always surfaces the same categories of deferred risk:
Backups that are not verified. The job runs green every night. Nobody has tested a restore in two years. In several cases, the backup was completing but the backup software was writing to a destination that had run out of space — it was overwriting old backups silently.
Lapsed subscriptions. Firewall security subscriptions expired 4–8 months ago. The firewall is still running, but signature updates stopped. Endpoint protection licences lapsed for a portion of the fleet.
Dormant accounts. Staff who left the organisation three to twelve months ago still have active Microsoft 365 licences and, in some cases, VPN access. Nobody disabled the accounts because offboarding did not include an IT step.
Pre-failure disk warnings. Server disks showing reallocated sector counts or pending sector errors — the disk is degrading and will fail. Without monitoring, the first sign is the server going down.
Expired UPS batteries. UPS units showing "battery OK" status in software despite batteries that are four or five years old. A test discharge takes five minutes and reveals whether the battery would actually protect the server in a power event.
These are not unusual environments. They are typical of businesses that rely on reactive IT support — everything gets fixed when it breaks, but the background health of the infrastructure is not proactively maintained.
What to Ask a Preventive Maintenance Provider
Before signing a contract, ask these questions and expect specific answers:
- What does the monthly report look like? Ask to see a sample. If they cannot produce one, the programme is not structured enough.
- What RMM platform do you use? Remote monitoring and management software is the backbone of proactive IT support. If they cannot name it, they are probably not doing real-time monitoring.
- How do you verify backups? "The job runs green" is not an answer. Ask about restore testing frequency and methodology.
- Who responds when monitoring flags something? Is it the same engineer who knows your environment, or a shared helpdesk queue?
- What is your response time for critical alerts outside business hours? If a disk failure alert triggers at 11pm, what happens?
- Can you show me patch compliance reports from an existing client? If not as-is, a redacted example.
Vague or evasive answers to these questions indicate a service that reacts to tickets rather than proactively managing your environment.
Aggasys provides preventive IT maintenance for Singapore businesses — monthly monitoring reports, scheduled health checks, patch management, backup verification, and on-site visits from the same engineers who know your environment. Book a free IT health assessment and we will show you the current state of your infrastructure before you commit to anything.
Frequently Asked Questions
What is included in a preventive IT maintenance visit or plan?
A preventive maintenance plan covers seven core areas: hardware health monitoring (disk, CPU, RAM, UPS), OS and firmware patching, backup verification with actual restore testing, certificate and subscription tracking, access control audits, capacity monitoring, and network and connectivity checks. Most Singapore providers bundle these into a monthly retainer with a monthly health report, plus scheduled quarterly and annual tasks like firmware updates, UPS battery tests, and a full disaster recovery test. Ask to see a sample monthly report before signing — if a provider cannot produce one, the plan is not structured enough to call preventive maintenance.
How often should preventive IT maintenance be done?
Preventive maintenance runs on three cadences: monthly (patch review, backup log checks, monitoring alert review, capacity trends), quarterly (firmware updates, UPS battery tests, access control audits, certificate expiry checks, a physical site visit), and annually (a full disaster recovery test, IT policy review, refresh planning, and vendor contract review). Skipping any one cadence is usually where the gaps start — quarterly UPS tests and access audits are the most commonly dropped in practice.
How much does preventive IT maintenance cost in Singapore?
For a Singapore SME, preventive maintenance typically runs SGD 300–1,500 per month for a cloud-first or single-server environment, rising to SGD 1,500–3,500 for a hybrid environment with 2–5 servers and 50–100 devices, and SGD 3,500–8,000+ for complex environments with compliance requirements. Project work such as server upgrades or network redesigns is scoped separately from the ongoing maintenance retainer.
What actually happens if you skip preventive IT maintenance?
The Cyber Security Agency of Singapore found 68% of SMEs experienced a major IT disruption in 2024, at an average recovery cost of SGD 8,000 per incident — and emergency IT work costs 2–3 times more than planned maintenance because it happens under pressure at emergency callout rates (SGD 120–300/hour). In practice, the failures that show up are rarely sudden: disks showing pre-failure warnings for months, lapsed firewall subscriptions, UPS batteries that would not survive a real power cut, and backup jobs that had been failing silently for weeks. Preventive maintenance exists to catch exactly these things before they become outages.
Is preventive maintenance already included in a standard managed IT contract, or is it billed separately?
It depends on the provider and the scope of the contract — some managed IT retainers bundle monitoring, patching, and backup checks as standard, while others treat preventive maintenance as an add-on with a separate line item. Before signing any managed IT contract, ask explicitly what maintenance activities are included in the base fee versus what triggers an additional charge, and ask to see a sample of the reporting you would actually receive. A contract that only mentions "proactive support" without listing specific monthly, quarterly, and annual tasks is not a preventive maintenance programme.
Book an IT Health Check with Aggasys
Aggasys runs a structured health check across your network, servers, endpoints, and backups to identify what preventive maintenance your environment actually needs — no generic checklist, just what applies to your setup.
aggasys.com/contact or call (+65) 6250 0045