when should small businesses upgrade their IT?

I have been asked to give a lecture on a case for business to upgrade their IT. I only have an hour to get the point accross and answer questions. I want to cover internal and internet security, network infrastructure protection, firewalls, disaster recovery, data storage (on premise and in the cloud), desktop standardization, and productivity. Is there a white paper or a case study that I can use? an hour is not much time and I want to be as up to date as I can.