Future StateAdvisors

Signals & Strategy

What we are seeing across the companies we work with, and what we would do about it.

Financial Services

Read Your Cyber Policy Against Your Risk Register, Not Your Budget

Cyber cover is usually bought on price and limit. The useful exercise is reading the policy's conditions against what your own risk register says is true.

Healthcare

A Risk Analysis You Do Once Is Not a Risk Analysis

Most practices have a security risk analysis in a folder. Very few have one that reflects the environment today, and that difference is what an auditor is actually looking for.

Professional Services

Merging Two Firms Means Merging Two Sets of Client Obligations

A lateral acquisition or merger arrives with two document systems, two client lists, and two sets of confidentiality commitments. The systems question is easier than the obligations one.

Manufacturing

The Seam Between IT and OT Is Where Ransomware Gets Into Plants

Production equipment and business systems increasingly share a network, and in most mid-sized manufacturers nobody owns the boundary between them. That gap is the most common route into a plant.

Advisory & Value

Why You Should Pay for Advice You Could Get Free

Vendors, resellers and managed providers give away technology advice. It is genuinely useful and it is not independent, and the difference shows up on the largest decisions.

Construction

When Security Requirements Become a Condition of Bidding

Owners and general contractors have started attaching security and insurance requirements to prequalification. For subcontractors, that turns IT into a revenue question.

Private Equity

Add-Ons Do Not Integrate Themselves

Each acquisition brings another ERP, another domain, another provider. Synergies stay theoretical until systems converge, and convergence needs an owner and a sequence.

Financial Services

The Core System Contract You Signed Seven Years Ago

Core platform contracts in financial services are long, auto-renewing, and negotiated once. Most firms discover their position ninety days before a renewal, which is ninety days too late.

Healthcare

When a Payer or Health System Reviews Your Security

Referral partners and payers increasingly send security reviews before they contract. Treating each one as a fire drill is the expensive way to answer them.

Professional Services

Everyone Hates the Practice Management System. That Is Not a Business Case.

Every firm has a system people complain about and a standing suggestion to replace it. Sometimes replacement is right. Usually the complaint is about something the replacement will inherit.

Manufacturing

Your Biggest Customer Sent a Security Questionnaire. Now What?

Large customers increasingly audit their suppliers' security. For a manufacturer with a lean IT team, the questionnaire is less a technical problem than a documentation one.

Advisory & Value

The Four Value Drivers Technology Actually Moves

Technology spending gets justified by efficiency and defended by fear. Neither is a value driver. There are four that matter, and they are measurable.

Construction

The Jobsite the Network Never Reached

Field technology fails at the site, not in the office. The pattern is always the same: tools chosen for the office, deployed to a place with no reliable connection.

Private Equity

What a Sponsor Should Expect From the Technology Line of the Value Creation Plan

Technology appears in most value creation plans as a cost line and a vague modernisation workstream. Here is what it should look like if it is going to hold up at the investment committee.

Financial Services

One Evidence Set for the Examiner, the Carrier and the Client

Financial firms answer the same security questions three times a year to three different audiences. Maintaining one current evidence set instead of three narratives is the difference.

Healthcare

The Clinical Equipment You Are Not Allowed to Patch

Imaging, lab and monitoring devices routinely run operating systems years past support, on the same network as everything else, under contracts that forbid you touching them.

Professional Services

When a Client Audits Your Security

Corporate clients increasingly review their advisors' security before renewing. For a firm whose product is confidentiality, failing that review is a commercial event, not an IT one.

Manufacturing

What Unplanned Downtime Actually Costs, and How to Build the Case

Most manufacturers can quote a downtime figure and very few can defend it. Getting the number right is what turns a technology request into a funded decision.

Advisory & Value

What a Fractional CIO Costs, and What It Has to Return

The comparison is not fractional versus full-time. It is fractional versus the decisions currently being made without anyone qualified in the room.

Construction

One Version of Job Cost, and Everyone Believes It

Most contractors have three numbers for the same job and a monthly argument about which is right. The fix is less about software than about who owns the number.

Private Equity

Twelve Months After Diligence, the IT Findings Are Still a Slide

Technology diligence produces a list of risks. Converting that list into a funded, sequenced plan with owners is a different job, and it is the one that usually goes unassigned.

Financial Services

Your Real Threat Model Is a Convincing Email About a Wire

Financial firms spend on perimeter security and lose money to a plausible message and a rushed approval. The controls that stop it are procedural, cheap, and usually missing.

Healthcare

When the EHR Vendor Sets Your Technology Roadmap

For most clinics and specialty groups the clinical system dictates what is possible, what it costs, and when it changes. Nobody on the practice side is checking whether the answer given was the right one.

Professional Services

The Margin Hiding in Your Software Stack

Professional services firms accumulate tools the way they accumulate matters: one urgent need at a time. The cost is rarely the licences. It is the adoption.

Manufacturing

Before You Replace the ERP, Find Out Whether It Is the Problem

Every vendor in the room has a replacement to sell. Here is how to work out whether your ERP is genuinely at end of life, or whether you are about to spend seven figures reproducing the same frustration.

Advisory & Value

What a Technology Assessment Should Actually Tell You

Free IT audits reliably discover you need what the auditor sells. Here's what an honest assessment looks like, and the questions it must answer.

Advisory & Value

Five Signs Your Company Has Outgrown Its IT Provider

Your MSP isn't bad; your needs changed. Here's how to tell the difference, and what to do about it without torching the relationship.

Advisory & Value

The Space Between Reactive IT and a Full-Time CIO

Most growing companies have outgrown their IT provider but can't justify a $250k executive. That gap has a name, a cost, and a fix.