Stop Calling Dave from IT, Your CIO (He's Not, and It's Destroying Your Business)

Dave from IT is a bloody legend. He keeps your servers running, fixes the printer when it inevitably jams, and somehow manages to make sense of the digital chaos that passes for your technology infrastructure.

But Dave isn't your Chief Information Officer, no matter what his LinkedIn profile says.

And pretending he is might be the most expensive mistake your business makes this year.

Here's the brutal reality check that 73% of UK small businesses desperately need: operational IT support and strategic technology leadership are completely different skills. It's like asking your mechanic to design the next generation of automotive engines. They might understand how things work, but designing what comes next? That's a different profession entirely.

Pull up a chair. This intervention is long overdue.

The £800-Per-Month Reality Check

Last month, I assessed a 15-person marketing agency in Manchester. Lovely people, growing business, terrible technology strategy.

They were spending £800 monthly on various cloud storage solutions because different teams had signed up for different services over time. Dropbox here, Google Drive there, OneDrive somewhere else, and a random Box account nobody could remember setting up.

Classic small business approach: solve today's problem with today's solution. No coordination, no strategy, just tactical reactions to immediate needs.

Their "CIO" was actually Dave, whose job description included:

  • Fixing the office printer

  • Managing email accounts

  • Troubleshooting software issues

  • Somehow also designing the company's entire technology strategy

When I asked about their five-year technology roadmap, Dave laughed and said he was too busy keeping things working to think about next month, never mind next year.

That's not Dave's fault. That's a fundamental misunderstanding of what strategic technology leadership actually means.

What Real CIOs Actually Do (Hint: It's Not Fixing Printers)

A genuine Chief Information Officer spends their time on strategic questions that determine whether your business thrives or merely survives:

Technology Roadmap Development: How will our technology investments support business objectives over the next 18-36 months? What systems need upgrading before they become bottlenecks? How do we ensure our infrastructure scales with business growth?

Vendor Strategy and Procurement: Which suppliers provide the best combination of functionality, security, and value? How do we negotiate enterprise agreements that make financial sense? What happens if a critical vendor gets acquired or goes out of business?

Risk and Compliance Planning: How do we ensure data protection compliance as we expand into new markets? What technology controls do we need for industry regulations? How do we balance accessibility with security requirements?

Business Enablement: What technology investments would unlock new revenue opportunities? How do we eliminate efficiency bottlenecks that slow down operations? Which processes could be automated to free up staff for higher-value work?

Notice what's missing from that list? Printer troubleshooting, password resets, and software installation.

Those are operational tasks. Important ones, but they're not strategic leadership.

The CISO Component Nobody Talks About

It gets worse. Most small businesses don't just need technology strategy; they need security strategy. And that's an entirely different type of thinking.

A Chief Information Security Officer asks different questions:

Risk Assessment: What are our most valuable data assets, and how are they currently protected? Where are the gaps in our security posture? What would happen if our most critical systems were compromised?

Compliance Management: Are we meeting GDPR requirements properly, or just hoping nobody asks awkward questions? What documentation do we need for cyber insurance claims? How do we demonstrate due diligence to clients and partners?

Incident Response Planning: What happens when (not if) we detect a security breach? Who needs to be notified, and in what order? How do we maintain business operations during a security incident?

Security Architecture: How do we implement security controls that protect the business without crippling productivity? What's the right balance between access and protection? How do we secure remote working without creating user frustration?

Again, notice what's missing? Installing antivirus software and blocking suspicious websites.

Those are security operations. Critical functions, but they're not strategic security leadership.

Why Most Small Businesses Get This Spectacularly Wrong

The confusion stems from how most small businesses grow. You start with Dave handling basic IT support because that's what you need. Email setup, internet connectivity, maybe a simple server.

As the business expands, technology becomes more complex. More users, more systems, more integration requirements. Dave adapts, learns new skills, takes on additional responsibilities.

Eventually, Dave is making strategic decisions about technology investments, vendor selection, and security architecture. Not because he trained for those roles, but because somebody has to make those decisions and Dave's the only person who understands the technology.

This is how we end up with brilliant operational technicians making strategic decisions they're not equipped to handle.

It's not fair to Dave. It's not good for the business. And it's certainly not sustainable as you continue growing.

The £180,000 Problem (And the £25,000 Solution)

"Right then, Noel," I hear you saying, "we obviously need proper strategic leadership. But we can't afford to hire a CIO. Have you seen the salaries?"

You're absolutely correct. A experienced CIO in London commands £180,000 to £250,000 annually, plus benefits, plus the challenge of finding someone with the right experience for your specific business context.

Someone with both technology strategy and security strategy expertise? Even more expensive.

But here's what most small businesses don't realise: you don't need a full-time strategic leader. You need strategic thinking.

This is where fractional services completely change the equation.

Instead of hiring someone for 40 hours per week, you engage someone for 8-10 hours per month. Same level of expertise, same strategic thinking, same business focus. But scaled appropriately for your actual needs.

The mathematics are compelling:

  • Full-time CIO: £180k+ annually

  • Fractional CIO/CISO: £15k-30k annually

  • Time allocation: Strategic guidance when you need it, not administrative overhead when you don't

For most small businesses, this isn't just more affordable. It's more effective.

What 8 Hours Per Month Actually Buys You

Let me walk through what strategic technology leadership looks like in practice, using my own fractional engagements as examples.

Month 1: Current State Assessment

  • Technology inventory and architecture review

  • Security posture evaluation

  • Vendor relationship analysis

  • Strategic priorities identification

Month 2: Strategic Planning

  • 18-month technology roadmap development

  • Budget planning and cost optimisation

  • Risk assessment and mitigation planning

  • Compliance gap analysis

Month 3: Implementation Planning

  • Vendor evaluation and procurement support

  • Project planning and resource allocation

  • Staff training and development requirements

  • Success metrics and monitoring frameworks

Ongoing Monthly Activities:

  • Strategic decision support for urgent issues

  • Vendor relationship management

  • Budget and spending analysis

  • Risk monitoring and threat assessment

  • Technology trend evaluation

What this doesn't include: Day-to-day operational support, system administration, or technical troubleshooting.

Dave continues handling operational tasks. The fractional executive provides strategic guidance and decision-making support.

It's enhancement, not replacement.

The Manchester Marketing Agency (Six Months Later)

Remember that marketing agency spending £800 monthly on uncoordinated cloud storage?

Six months after engaging fractional CIO services:

Technology consolidation: Single platform for all file storage, collaboration, and project management. Monthly cost reduced to £450.

Security improvements: Unified data governance, proper access controls, automated backup verification.

Operational efficiency: Improved team collaboration, reduced time spent on file management, eliminated duplicate work.

Strategic planning: Technology roadmap aligned with business growth plans, vendor relationships optimised, compliance requirements properly addressed.

Total cost savings: £350 monthly on cloud services alone. Annual saving: £4,200.

Fractional CIO investment: £18,000 annually.

Net ROI: Strategic guidance paid for itself through better vendor negotiations, never mind the operational improvements and risk reduction.

This is what happens when strategic thinking replaces tactical reactions.

Finding Fractional Providers Who Aren't Cowboys

Not everyone calling themselves a "fractional CIO" deserves the title. The field attracts consultants who've decided to rebrand themselves without gaining the necessary strategic experience.

What to look for:

  • Genuine senior-level experience managing technology for organisations with 100+ employees

  • Specific examples of technology strategies they've developed and implemented

  • Understanding of your industry's regulatory and compliance requirements

  • Ability to communicate complex technical concepts in business terms

  • Track record of successful vendor negotiations and cost optimisation

Red flags:

  • Generic recommendations that could apply to any business

  • Inability to provide specific examples of strategic decisions they've made

  • Focus on selling additional services rather than solving your problems

  • Template-driven approaches without business context

  • Promises to solve all your problems immediately

The evaluation process: Start with a specific project or assessment. Maybe a current state evaluation that identifies strategic priorities and provides concrete recommendations.

This lets you evaluate their thinking, communication style, and business understanding before committing to an ongoing relationship.

When Dave Becomes Your Strategic Technology Partner

Here's what happens when you get this right: Dave stops being overwhelmed by strategic decisions he's not equipped to make, and starts focusing on what he does brilliantly—keeping your technology running efficiently.

The fractional executive provides strategic direction. Dave implements the operational components. Neither person is trying to do jobs they're not suited for.

Dave's role evolves:

  • Senior systems administrator with strategic support

  • Technology implementation specialist

  • Internal advocate for operational excellence

  • Bridge between strategic planning and daily operations

Dave's career benefits:

  • Exposure to strategic thinking and planning

  • Professional development opportunities

  • Reduced stress from strategic decision-making

  • Recognition for operational expertise

Business benefits:

  • Strategic technology decisions aligned with business objectives

  • Operational excellence without strategic confusion

  • Professional development for internal staff

  • Scalable approach that grows with the business

This isn't about replacing Dave. It's about giving Dave the strategic support he needs to excel at what he does best.

The Reality Check UK Small Businesses Need

Strategic technology leadership isn't just for large corporations anymore. Every business making technology decisions needs strategic thinking, not just operational support.

The question isn't whether you can afford fractional CIO/CISO services. The question is whether you can afford to continue making technology decisions without strategic guidance.

Calculate the cost of your current approach:

  • How much are you spending on duplicate or redundant systems?

  • What's the business impact of technology limitations that slow down operations?

  • How much would a major security incident or compliance failure cost?

  • What revenue opportunities are you missing because technology can't support them?

For most growing businesses, the answer is sobering. The cost of strategic leadership is typically less than the cost of continuing without it.

Your Next Strategic Decision

If you've recognised your business in this article, start with honest self-assessment:

  • Are technology decisions being made strategically or reactively?

  • Will current systems scale gracefully with business growth?

  • Are security and compliance concerns being addressed proactively?

  • Is your internal IT person spending time on strategic issues they're not equipped to handle?

If the answers concern you, consider a technology assessment from a qualified fractional provider. You'll understand your current state and evaluate whether ongoing strategic guidance would benefit your business.

Remember: The goal isn't replacing your internal capabilities. It's enhancing them with strategic guidance that aligns technology investments with business objectives.

Stop calling Dave your CIO. He deserves better. Your business deserves better.

And Dave will be the first person to thank you for bringing in proper strategic support.

Strategic thinking isn't a luxury for large corporations. It's a necessity for any business that plans to survive and thrive in an increasingly digital world.

The question is: will you get strategic about technology before your competitors do?

Noel Bradford

Noel Bradford – Head of Technology at Equate Group, Professional Bullshit Detector, and Full-Time IT Cynic

As Head of Technology at Equate Group, my job description is technically “keeping the lights on,” but in reality, it’s more like “stopping people from setting their own house on fire.” With over 40 years in tech, I’ve seen every IT horror story imaginable—most of them self-inflicted by people who think cybersecurity is just installing antivirus and praying to Saint Norton.

I specialise in cybersecurity for UK businesses, which usually means explaining the difference between ‘MFA’ and ‘WTF’ to directors who still write their passwords on Post-it notes. On Tuesdays, I also help further education colleges navigate Cyber Essentials certification, a process so unnecessarily painful it makes root canal surgery look fun.

My natural habitat? Server rooms held together with zip ties and misplaced optimism, where every cable run is a “temporary fix” from 2012. My mortal enemies? Unmanaged switches, backups that only exist in someone’s imagination, and users who think clicking “Enable Macros” is just fine because it makes the spreadsheet work.

I’m blunt, sarcastic, and genuinely allergic to bullshit. If you want gentle hand-holding and reassuring corporate waffle, you’re in the wrong place. If you want someone who’ll fix your IT, tell you exactly why it broke, and throw in some unsolicited life advice, I’m your man.

Technology isn’t hard. People make it hard. And they make me drink.

https://noelbradford.com
Next
Next

60% of Small Businesses Don’t Survive Cyberattacks. Are You Listening Yet?