Ian Findlay
Fractional CIO | CIO Practice Lead | Chief Information Officer
Why growing companies need fractional CIO leadership to reduce risk, improve IT strategy, and scale without the cost of a full-time executive
I’ve spent close to 40 years working in technology, primarily as a consultant, including 20 running my own managed service provider. In that time, I’ve worked with companies ranging from two-person startups to organizations with several hundred employees. And one thing I see consistently, regardless of industry or growth stage, is this: the companies that struggle most with technology aren’t the ones that made bad decisions. They’re the ones that didn’t make deliberate decisions at all.
Technology just happened to them. And at some point, it started costing them.
That’s the $300K problem. Paying $250,000 to $300,000 or more in annual compensation for a full-time hire is genuinely out of reach for most companies under 300 employees.
But the real issue isn’t just the cost.
The deeper problem is what happens in that leadership gap: the absence of strategic IT leadership that leads companies to make technology decisions by default rather than by design. And the problems that can show up later are often very urgent, very complex, and very expensive.
This question comes up enough that it’s worth clarifying. A Chief Information Officer is responsible for how technology supports the business. That includes setting IT strategy, managing risk, overseeing systems and vendors, and ensuring that infrastructure, security, and processes are aligned with the company’s goals. In smaller companies, this role is less about managing large teams and more about acting as the head of corporate IT — making sure the business is building a secure technology foundation that will scale. A critical role, for sure.
When I talk to founders and CEOs of smaller companies, I usually ask the same question: who is making your strategic technology decisions? The answer is almost always some version of “well, we have someone who handles IT.”
That person — let’s call him Bob — is probably doing a fine job at what he was hired to do. He keeps the laptops running, handles new employee setups, and makes sure the day-to-day technical issues get resolved. Bob is competent and the company would feel it immediately if he weren’t there.
But Bob isn’t thinking strategically about IT, or about whether the systems being built today will support a company twice the size in three years. He’s not evaluating whether your cloud environment is configured for security and efficiency, or identifying the technology investments that will actually move the business forward versus the ones that just sound good in a vendor pitch. That’s not a gap in Bob’s work ethic — it’s a gap inherent in the role itself.
Here’s what I tell companies: for an experienced IT executive in an organization of 5 to 300 employees, leading IT should be a two-to-three day per week job at most. It’s not a 40-hour-a-week position — but it’s definitely not zero. The companies that treat it as zero are the ones I hear from later, usually when things have gotten…complicated.
There’s also a structural risk in the “Bob model” that doesn’t get talked about enough.
When one person carries all the institutional knowledge about how your IT systems developed and work, the company is exposed every time that person is unavailable — whether that’s a sick day, a vacation, or a resignation. Everything they know goes with them. The processes they never documented, the configurations they set up and never explained, the vendor relationships they managed informally.
That’s not a Bob problem. It’s a planning problem that leadership created by treating IT as an afterthought.
After running an MSP for two decades, I can speak to this from the inside. The term “virtual CIO” — or vCIO — was coined by the Managed Service Provider (MSP) industry, and it’s worth understanding what it actually means in practice versus how it’s marketed.
MSPs provide real value. They bring a team of specialists — from security to networking, cloud, helpdesk, and more — that smaller companies couldn’t afford to hire individually. That team structure also solves the single-point-of-failure problem that comes with an internal-only IT setup. I work with MSPs regularly and recommend them to clients. They’re an important part of the IT picture, especially for companies under 300 employees.
But the vCIO role that most MSPs offer is a different story. The marketing says the vCIO will help you set IT strategy, make sound technology investments, and navigate the evolving security landscape. But in practice, it is often just a sophisticated account management function. The vCIO’s job, when you trace the incentives back to the source, is to retain and grow the MSP’s relationship with your company.
That’s not necessarily malicious — it’s just how the MSP model works. But it means the strategic advice you’re getting has a particular frame around it that’s not necessarily objective.
A fractional CIO operates differently. I’m not selling services. I’m not trying to grow an account. My job is to make sure your strategic technology decisions are good ones — for your business, your growth trajectory, and your risk profile. That independence matters more than most companies realize until they’ve experienced both.
This is the question I wish more leadership teams asked before something broke.
Without dedicated IT leadership, technology strategy doesn’t really get built — it just accumulates. Decisions get made by whoever is in the room: often a founder or an operations lead who is excellent at their job but wasn’t hired to think about infrastructure architecture. Those decisions aren’t always wrong. But they’re rarely made with full visibility into what happens downstream.
And it shows:
Left unaddressed, any one of these becomes a much bigger problem than it needed to be. That’s just the natural result of letting technology decisions happen without strategic leadership guiding them.
I’m particularly convinced of this at the early stage. The technology decisions a company makes at five or fifteen employees set the trajectory for everything that follows. Getting those right — or having someone in your corner to flag when they’re going sideways — is significantly less expensive than correcting them later. Unlike some other C-suite roles, where the need only becomes clear at a certain revenue threshold, I genuinely believe a company can benefit from Fractional CIO leadership from day one.
Growth creates its own inflection points, too. Doubling headcount, entering new markets, acquiring another business, shifting to hybrid work — each of these puts different demands on your technology foundation. The companies that navigate those transitions smoothly are almost always the ones that thought about and planned for them before they arrived.
If IT has been running on autopilot, those moments have a way of surfacing everything that wasn’t built to scale, secured properly, or documented well enough to survive a transition.
When I engage with a new client, I almost always start with what I call an IT Health Assessment. It’s a structured process that gives both of us an honest picture of where the company actually stands — not just whether the hardware is current, but whether the processes, policies, vendor relationships, and cloud configurations are genuinely serving the business.
The assessment looks at five areas:
The output is straightforward: a clear report with red, yellow, and green ratings and a prioritized set of recommendations. Some things need immediate attention, others are on a longer timeline, and some things are just fine.
The point is bigger than finding problems — it’s to replace uncertainty with clarity.
That’s because what I find most often isn’t that companies are in crisis. It’s that they simply don’t know. They’ve been operating without visibility into their own technology stack health, which means they’re making investment decisions, vendor decisions, and hiring decisions without the full picture. In about a third of my assessments over the last three years, I’ve found that the IT team or MSP in place wasn’t doing what the company thought they were paying for.
That’s not a comfortable discovery. But it’s a much better discovery before something goes wrong.
I want to share a situation I’ve been working through recently, because I think it illustrates what the absence of CIO oversight actually costs — not in the abstract, but in real, painful operational terms.
A private equity firm acquired two software companies and decided to combine them. Perfectly normal. What didn’t happen was the IT integration. Both companies kept running in their own separate Microsoft 365 environments — separate email systems, separate calendars, separate document storage, separate Teams instances. Fourteen months went by this way.
The employees were toggling between two systems every day. Meeting invitations got lost between environments. Documents lived in the wrong place. New hires needed accounts in both systems just to function. It’s an example of how IT problems can just accumulate, forcing people to work around them.
In the midst of this, the IT person left — taking all the institutional knowledge with him.
That’s when I was brought in as an emergency manager to keep the org running. We built a small temporary team and started evaluating MSP options, while at the same time dealing with the legacy of this two-Microsoft-environment disaster. The last straw was a new CEO joining the company — that was the impetus to kick off the migration to a new MSP and resolve the lingering technology issues.
The combined risk of IT person departure and lack of strategic vision represented a significant cost to the company in time, emergency resources, organizational drag, and productivity lost every day. It certainly exceeded what it would have cost to have proactive IT leadership during the merger.
That’s the math I wish more companies ran before they found themselves in a situation like this.
The lesson isn’t that mergers are hard, or that IT integration is complicated. It’s that without experienced CIO capabilities in the room — with both the technical credibility and the organizational standing to drive technology decisions — those decisions don’t get made. And the longer they don’t get made, the more expensive the eventual reckoning.
I’ve spent a long time watching companies navigate technology decisions — some well, most by accident. The ones that come out ahead aren’t necessarily the ones that spent the most or moved the fastest. They’re the ones that had someone in the room asking the right questions at the right time.
The $300K problem isn’t really about the price of a CIO. It’s about what happens when companies assume they can’t afford strategic IT leadership and never look for a better answer.
The Fractional CIO model is that better answer. Whether you’re five people making your first technology decisions, or 200 people untangling the consequences of the ones you made ten years ago, my goal is the same: make sure your technology is working in service of your business objectives — not the other way around.
Senior IT leadership at a growing company is a part-time engagement. But “part-time” is not the same as optional. The fractional model exists because the value of that leadership doesn’t scale down with company size — but the cost can.
Technology decisions made without strategic guidance don’t stay small. They accumulate into expensive remediation projects that tend to land at the worst possible moments — like during a growth push, a merger, or a leadership transition.
MSPs and vCIOs serve real purposes, but their incentives aren’t always perfectly aligned with yours. An independent fractional CIO’s only agenda is your company’s technology health and growth.
The highest-leverage moment for fractional IT leadership is early, when foundational decisions are still being made. But companies at any stage can benefit from getting clarity on where they stand and what needs attention.
There’s a world of difference between “working fine” and “ready for what’s next.” An IT Health Assessment is the fastest way to find out which one you’re actually dealing with.
An IT health assessment from one of our highly experienced Fractional CIOs is a low-commitment way to find out where you actually stand. Let’s have that conversation — no agenda, just clarity.
FAQ
The work varies by client and stage, but at its core a fractional CIO provides strategic IT leadership: aligning technology decisions with business goals, overseeing vendors and internal IT resources, evaluating investments, managing risk, and serving as the senior technology voice in leadership conversations. It’s not about fixing laptops, it’s about making sure the right systems are in place and that the decisions being made today won’t create problems tomorrow.
A vCIO is typically a service offered by a managed service provider, and their incentives — however well-intentioned — are ultimately tied to the MSP’s business interests. A fractional CIO is an independent advisor. There’s no product to sell you, no contract to protect. The advice is driven entirely by what’s right for your company.
In my experience, companies from just a few employees up to around 300 can benefit meaningfully from Fractional CIO leadership. A CIO measures company size by headcount, not revenue. What matters is how many people and systems need to be supported, not the top line. And frankly, the earlier a company engages this kind of leadership, the better the return.
Having an MSP and having strategic IT leadership aren’t mutually exclusive, they’re complementary. A fractional CIO can evaluate whether your MSP is actually delivering what you’re paying for, manage that relationship on your behalf, and provide the strategic layer that most MSPs aren’t structured to offer. In fact, some of the most immediate value a Fractional CIO provides is in helping companies understand what their MSP is and isn’t doing for them.
Honestly, most companies don’t know until something surfaces it. An IT health assessment is the most straightforward way to find out. It gives you an objective picture of where things stand across infrastructure, security, cloud systems, processes, and vendor performance. The goal isn’t to find problems for the sake of it. It’s to replace guesswork with clarity so you can make better decisions going forward.
Get the latest insights from TechCXO’s fractional executives—strategies, trends, and advice to drive smarter growth.
Why growing companies need fractional CIO leadership to reduce risk, improve IT strategy, and scale without the cost of a full-time executive
I’ve spent close to 40 years working in technology, primarily as a consultant, including 20 running my own managed service provider. In that time, I’ve worked with companies ranging from two-person startups to organizations with several hundred employees. And one thing I see consistently, regardless of industry or growth stage, is this: the companies that struggle most with technology aren’t the ones that made bad decisions. They’re the ones that didn’t make deliberate decisions at all.
Technology just happened to them. And at some point, it started costing them.
That’s the $300K problem. Paying $250,000 to $300,000 or more in annual compensation for a full-time hire is genuinely out of reach for most companies under 300 employees.
But the real issue isn’t just the cost.
The deeper problem is what happens in that leadership gap: the absence of strategic IT leadership that leads companies to make technology decisions by default rather than by design. And the problems that can show up later are often very urgent, very complex, and very expensive.
This question comes up enough that it’s worth clarifying. A Chief Information Officer is responsible for how technology supports the business. That includes setting IT strategy, managing risk, overseeing systems and vendors, and ensuring that infrastructure, security, and processes are aligned with the company’s goals. In smaller companies, this role is less about managing large teams and more about acting as the head of corporate IT — making sure the business is building a secure technology foundation that will scale. A critical role, for sure.
When I talk to founders and CEOs of smaller companies, I usually ask the same question: who is making your strategic technology decisions? The answer is almost always some version of “well, we have someone who handles IT.”
That person — let’s call him Bob — is probably doing a fine job at what he was hired to do. He keeps the laptops running, handles new employee setups, and makes sure the day-to-day technical issues get resolved. Bob is competent and the company would feel it immediately if he weren’t there.
But Bob isn’t thinking strategically about IT, or about whether the systems being built today will support a company twice the size in three years. He’s not evaluating whether your cloud environment is configured for security and efficiency, or identifying the technology investments that will actually move the business forward versus the ones that just sound good in a vendor pitch. That’s not a gap in Bob’s work ethic — it’s a gap inherent in the role itself.
Here’s what I tell companies: for an experienced IT executive in an organization of 5 to 300 employees, leading IT should be a two-to-three day per week job at most. It’s not a 40-hour-a-week position — but it’s definitely not zero. The companies that treat it as zero are the ones I hear from later, usually when things have gotten…complicated.
There’s also a structural risk in the “Bob model” that doesn’t get talked about enough.
When one person carries all the institutional knowledge about how your IT systems developed and work, the company is exposed every time that person is unavailable — whether that’s a sick day, a vacation, or a resignation. Everything they know goes with them. The processes they never documented, the configurations they set up and never explained, the vendor relationships they managed informally.
That’s not a Bob problem. It’s a planning problem that leadership created by treating IT as an afterthought.
After running an MSP for two decades, I can speak to this from the inside. The term “virtual CIO” — or vCIO — was coined by the Managed Service Provider (MSP) industry, and it’s worth understanding what it actually means in practice versus how it’s marketed.
MSPs provide real value. They bring a team of specialists — from security to networking, cloud, helpdesk, and more — that smaller companies couldn’t afford to hire individually. That team structure also solves the single-point-of-failure problem that comes with an internal-only IT setup. I work with MSPs regularly and recommend them to clients. They’re an important part of the IT picture, especially for companies under 300 employees.
But the vCIO role that most MSPs offer is a different story. The marketing says the vCIO will help you set IT strategy, make sound technology investments, and navigate the evolving security landscape. But in practice, it is often just a sophisticated account management function. The vCIO’s job, when you trace the incentives back to the source, is to retain and grow the MSP’s relationship with your company.
That’s not necessarily malicious — it’s just how the MSP model works. But it means the strategic advice you’re getting has a particular frame around it that’s not necessarily objective.
A fractional CIO operates differently. I’m not selling services. I’m not trying to grow an account. My job is to make sure your strategic technology decisions are good ones — for your business, your growth trajectory, and your risk profile. That independence matters more than most companies realize until they’ve experienced both.
This is the question I wish more leadership teams asked before something broke.
Without dedicated IT leadership, technology strategy doesn’t really get built — it just accumulates. Decisions get made by whoever is in the room: often a founder or an operations lead who is excellent at their job but wasn’t hired to think about infrastructure architecture. Those decisions aren’t always wrong. But they’re rarely made with full visibility into what happens downstream.
And it shows:
Left unaddressed, any one of these becomes a much bigger problem than it needed to be. That’s just the natural result of letting technology decisions happen without strategic leadership guiding them.
I’m particularly convinced of this at the early stage. The technology decisions a company makes at five or fifteen employees set the trajectory for everything that follows. Getting those right — or having someone in your corner to flag when they’re going sideways — is significantly less expensive than correcting them later. Unlike some other C-suite roles, where the need only becomes clear at a certain revenue threshold, I genuinely believe a company can benefit from Fractional CIO leadership from day one.
Growth creates its own inflection points, too. Doubling headcount, entering new markets, acquiring another business, shifting to hybrid work — each of these puts different demands on your technology foundation. The companies that navigate those transitions smoothly are almost always the ones that thought about and planned for them before they arrived.
If IT has been running on autopilot, those moments have a way of surfacing everything that wasn’t built to scale, secured properly, or documented well enough to survive a transition.
When I engage with a new client, I almost always start with what I call an IT Health Assessment. It’s a structured process that gives both of us an honest picture of where the company actually stands — not just whether the hardware is current, but whether the processes, policies, vendor relationships, and cloud configurations are genuinely serving the business.
The assessment looks at five areas:
The output is straightforward: a clear report with red, yellow, and green ratings and a prioritized set of recommendations. Some things need immediate attention, others are on a longer timeline, and some things are just fine.
The point is bigger than finding problems — it’s to replace uncertainty with clarity.
That’s because what I find most often isn’t that companies are in crisis. It’s that they simply don’t know. They’ve been operating without visibility into their own technology stack health, which means they’re making investment decisions, vendor decisions, and hiring decisions without the full picture. In about a third of my assessments over the last three years, I’ve found that the IT team or MSP in place wasn’t doing what the company thought they were paying for.
That’s not a comfortable discovery. But it’s a much better discovery before something goes wrong.
I want to share a situation I’ve been working through recently, because I think it illustrates what the absence of CIO oversight actually costs — not in the abstract, but in real, painful operational terms.
A private equity firm acquired two software companies and decided to combine them. Perfectly normal. What didn’t happen was the IT integration. Both companies kept running in their own separate Microsoft 365 environments — separate email systems, separate calendars, separate document storage, separate Teams instances. Fourteen months went by this way.
The employees were toggling between two systems every day. Meeting invitations got lost between environments. Documents lived in the wrong place. New hires needed accounts in both systems just to function. It’s an example of how IT problems can just accumulate, forcing people to work around them.
In the midst of this, the IT person left — taking all the institutional knowledge with him.
That’s when I was brought in as an emergency manager to keep the org running. We built a small temporary team and started evaluating MSP options, while at the same time dealing with the legacy of this two-Microsoft-environment disaster. The last straw was a new CEO joining the company — that was the impetus to kick off the migration to a new MSP and resolve the lingering technology issues.
The combined risk of IT person departure and lack of strategic vision represented a significant cost to the company in time, emergency resources, organizational drag, and productivity lost every day. It certainly exceeded what it would have cost to have proactive IT leadership during the merger.
That’s the math I wish more companies ran before they found themselves in a situation like this.
The lesson isn’t that mergers are hard, or that IT integration is complicated. It’s that without experienced CIO capabilities in the room — with both the technical credibility and the organizational standing to drive technology decisions — those decisions don’t get made. And the longer they don’t get made, the more expensive the eventual reckoning.
I’ve spent a long time watching companies navigate technology decisions — some well, most by accident. The ones that come out ahead aren’t necessarily the ones that spent the most or moved the fastest. They’re the ones that had someone in the room asking the right questions at the right time.
The $300K problem isn’t really about the price of a CIO. It’s about what happens when companies assume they can’t afford strategic IT leadership and never look for a better answer.
The Fractional CIO model is that better answer. Whether you’re five people making your first technology decisions, or 200 people untangling the consequences of the ones you made ten years ago, my goal is the same: make sure your technology is working in service of your business objectives — not the other way around.
Senior IT leadership at a growing company is a part-time engagement. But “part-time” is not the same as optional. The fractional model exists because the value of that leadership doesn’t scale down with company size — but the cost can.
Technology decisions made without strategic guidance don’t stay small. They accumulate into expensive remediation projects that tend to land at the worst possible moments — like during a growth push, a merger, or a leadership transition.
MSPs and vCIOs serve real purposes, but their incentives aren’t always perfectly aligned with yours. An independent fractional CIO’s only agenda is your company’s technology health and growth.
The highest-leverage moment for fractional IT leadership is early, when foundational decisions are still being made. But companies at any stage can benefit from getting clarity on where they stand and what needs attention.
There’s a world of difference between “working fine” and “ready for what’s next.” An IT Health Assessment is the fastest way to find out which one you’re actually dealing with.
An IT health assessment from one of our highly experienced Fractional CIOs is a low-commitment way to find out where you actually stand. Let’s have that conversation — no agenda, just clarity.
FAQ
The work varies by client and stage, but at its core a fractional CIO provides strategic IT leadership: aligning technology decisions with business goals, overseeing vendors and internal IT resources, evaluating investments, managing risk, and serving as the senior technology voice in leadership conversations. It’s not about fixing laptops, it’s about making sure the right systems are in place and that the decisions being made today won’t create problems tomorrow.
A vCIO is typically a service offered by a managed service provider, and their incentives — however well-intentioned — are ultimately tied to the MSP’s business interests. A fractional CIO is an independent advisor. There’s no product to sell you, no contract to protect. The advice is driven entirely by what’s right for your company.
In my experience, companies from just a few employees up to around 300 can benefit meaningfully from Fractional CIO leadership. A CIO measures company size by headcount, not revenue. What matters is how many people and systems need to be supported, not the top line. And frankly, the earlier a company engages this kind of leadership, the better the return.
Having an MSP and having strategic IT leadership aren’t mutually exclusive, they’re complementary. A fractional CIO can evaluate whether your MSP is actually delivering what you’re paying for, manage that relationship on your behalf, and provide the strategic layer that most MSPs aren’t structured to offer. In fact, some of the most immediate value a Fractional CIO provides is in helping companies understand what their MSP is and isn’t doing for them.
Honestly, most companies don’t know until something surfaces it. An IT health assessment is the most straightforward way to find out. It gives you an objective picture of where things stand across infrastructure, security, cloud systems, processes, and vendor performance. The goal isn’t to find problems for the sake of it. It’s to replace guesswork with clarity so you can make better decisions going forward.
"*" indicates required fields
Get the latest insights from TechCXO’s fractional executives—strategies, trends, and advice to drive smarter growth.