In Practice
From the field.
The examples here are illustrative and anonymized. Figures and identifying details have been generalized to protect client confidentiality.
AI
Moving fast, and staying in charge.
Token cost of one person’s two-week AI build. Now multiply by 150.
AI adoption is outpacing governance
AI is billed by usage and connects to business data. Across 150 people, the bill and the risk grow faster than most controls. Here is what to put in place first.
Read the example Governance · AIStaff using unlisted AI tools before any policy existed
The AI tools your staff are already using
Most organizations already have shadow AI in use before any policy exists. The question is whether IT gets ahead of it, or responds to an incident.
Read the example Implementation · AIEach produced a different list of issues in one release review
One AI model is not enough
Several findings that mattered came from outside the two market leaders. How we combine models, with one person accountable for the result.
Read the exampleSpend
Where the money was going.
MDM licensing cost avoided
macOS at scale, without the Jamf bill
Mac device management may already be covered by tools you are paying for. Knowing when to use them instead of a separate license changes the cost picture.
Read the exampleInfrastructure · CostRecurring cloud spend removed
When the cloud costs more than the office
A cloud desktop environment running into the hundreds of thousands a year, replaced with managed physical endpoints. The boring answer was the right one.
Read the exampleIdentity · MailOverlapping per-seat licensing eliminated
When Google and Microsoft need to coexist
The per-seat price gap between platforms closes quickly when you add the tools each requires. The question is capability fit, not cost.
Read the exampleNetworking · SecurityLower recurring network cost per site
SASE as a network modernization strategy
Replacing perimeter-based security with an architecture that follows the user and the device. Management is simpler in a single ecosystem, and the savings are measurable at each site added.
Read the exampleEndpoint · CostHardware configurations supported
Standardization as a cost strategy
Consistent device specifications and defined refresh cycles convert unpredictable hardware spend into a foreseeable budget line and reduce support overhead.
Read the exampleSpeed
How long things took.
Time for a leaver to lose all access
Making your directory as accurate as your HR system
Identity directories drift over time. Making HR the authoritative source closes the gap automatically, so access reflects reality and leavers cannot linger.
Read the exampleInfrastructure · ResilienceRecovery time objective for critical systems
Building a DR program that actually gets tested
Most DR plans exist on paper. A program that runs on a schedule, produces findings, and satisfies compliance requirements is a different thing entirely.
Read the exampleIdentity · AutomationTime to provision new-hire software access
Software by department, not by request
Tying application deployment to HR data makes software costs predictable, license spend auditable, and onboarding consistent without the manual overhead.
Read the exampleRisk and control
What was exposed, and who was answerable.
Framework requirements met by existing IT governance
What compliance frameworks actually ask of IT
ISO 27001, HIPAA, CMMC, PCI-DSS. Most of what these frameworks require is good IT governance. Understanding which parts need a specialist changes the cost and timeline significantly.
Read the exampleLeadership · AdvisoryAverage IT leader tenure, the shortest of any C-suite seat
A sounding board for the person running IT
A confidential advisory relationship for the individual IT leader, not the company. Sponsored by the employer like any other leadership-development investment.
Read the example