Signed

Buying Microsoft 365, Google Workspace, or Azure direct feels like the simpler choice, until you need support or get locked out of your own tenant. In this Playbook, Max Clark breaks down what a Cloud Solution Provider (a CSP) actually does between you and the platform: faster support and escalation, help recovering a locked tenant, engineering and migration support, and access to vendor funding you can't reach on your own, usually at little or no added cost. If you're deciding whether to buy direct or through a CSP, or renewing that decision without ever having checked it, this one's for you. The Playbook 00:51 What a CSP actually is 01:29 Why Microsoft and Google aren't built for support 01:55 Where a CSP sits between you and the platform 02:24 The vendor funding most buyers never access 03:19 The admin account problem most companies ignore 04:17 What happens when you get locked out 05:14 How a CSP changes your recovery and escalation path 06:11 Engineering, migration, and configuration support 06:38 Not all CSPs are the same 07:03 Tier zero vs. tier one support, explained 08:26 End-user support vs. administrative support in practice 09:25 Why a CSP rarely costs you anything extra 10:17 The bottom line: direct vs. CSP About Signed Signed is the podcast for buyers in a market built for sellers. Playbooks are the solo format, 10 to 15 minutes, one trigger, one specific play. New episodes weekly at itbroker.com/podcast. If the trigger in today's Playbook is one you're facing right now, book an intro call at itbroker.com. We help buyers make the right call the first time. Buy tech without regret. Follow: @itbrokerdotcom Full Transcript

Which workloads actually belong in public cloud, private cloud, colocation, or bare metal? Jeremy Pease, CEO of Aptum, joins Max Clark to break down how application requirements, infrastructure costs, connectivity, resilience, and scale should determine where your workloads run. They get into cloud migration and repatriation, why connectivity can cost more than the infrastructure itself, workloads that never needed the scale assumed in the original business case, and a colocation estimate that went from roughly $10,000 a month to $80,000 once the real requirements were modeled. If you're evaluating a cloud migration, renewal, repatriation, or infrastructure change, this conversation gives you the questions to run before deciding where the next workload belongs. Before your next migration, renewal, or repatriation decision: https://www.itbroker.com/blog/cloud-workload-assessment Jeremy Pease: https://www.linkedin.com/in/jeremy-pease-a53b972/ Aptum: https://aptum.com/ More from Signed: https://www.itbroker.com/podcast Full Transcript Click here to view the episode transcript.

You didn't choose your cloud provider. You inherited it, from whoever picked the safe option first and called it a decision. In this Playbook, Max Clark, CEO of ITBroker.com, names what that habit actually costs: three decades of consensus defaults, from the dot com era stack to LAMP to AWS's US East 1, and what the buyers who never questioned any of them paid for it, including the 15 hour outage this past October that took down Snapchat, Venmo, and a foreign government's tax site along with them. One question either ends the habit or exposes that you've never really made this decision at all: compared to what? The Playbook 00:27 Why "nobody gets fired for buying IBM" still runs every enterprise tech decision, and the gap between safe for your career and right for your company 01:28 The mistake: the consensus default isn't neutral, it's the product the market is built to sell you 03:05 Proof from history: the safe choice and the weird choice have traded places twice before this one 04:37 Today's default: AWS, US East 1, and what the October 2025 outage actually cost the buyers who never questioned it 06:32 The play, step 1: the average cost structure you guarantee yourself by matching every competitor's stack 08:00 The play, step 2: the cloud flexibility trap, committed spend agreements, and what cockroach mode actually protects 08:57 The play, step 3: a16z, 37signals, and Netflix chose three different answers, on purpose 13:51 What to watch for next: this isn't anti-cloud, it's anti-default, and why cloud transformation mandates quietly die around month 12 15:00 The buyer's job: ask "compared to what?" on every consequential decision Resources Mentioned Andreessen Horowitz, "The Cost of the Cloud: A Trillion Dollar Paradox" (Sarah Wang & Martin Casado, 2021) 37signals / DHH's public cloud exit writeup (Basecamp, HEY) Netflix Open Connect Dropbox's pre-IPO infrastructure buildout AWS US East 1 outage, October 2025 Further reading: Most of Your Infrastructure Can Be Standard. Some of It Shouldn't Be. — the six-part decision filter for identifying which infrastructure choices actually deserve a comparison against the default, built directly from this episode About the Show Signed is the podcast for buyers in a market built for sellers. Playbooks are the solo format, 10 to 15 minutes, one trigger, one specific play. New episodes weekly at itbroker.com/podcast. If the trigger in today’s Playbook is one you’re facing right now, book an intro call at itbroker.com. We help buyers make the right call the first time. Buy tech without regret. Follow: @itbrokerdotcom Full Transcript Click here to view the episode transcript.

Approving a technology invoice is not the same as validating it. Tommi Ellis, Channel Director at Intratem, joins Max Clark to explain how companies can tell whether anyone is actually checking telecom and technology bills against contracts, inventory, services, and real usage. They get into roughly $4,000 a month found sitting unnoticed on a 270-line wireless account, larger audits recovering as much as $1.2 million annually, canceled services that continue getting billed, and why the first invoice after a new contract or service change deserves immediate scrutiny. They also break down why technology expense management often falls between IT and finance, what happens when years of vendor knowledge leave with one employee, and how a strong contract can quietly stop being a good deal when nobody checks what happens after signature. Run the six-point technology invoice audit: https://www.itbroker.com/blog/technology-invoice-audit Tommi Ellis: https://www.linkedin.com/in/tommi-ellis-3a92b0112 Intratem: https://intratem.com/ More from Signed: https://www.itbroker.com/podcast Full Transcript Click here to view the episode transcript.

You're paying an MDR provider to protect you. Most of them will alert you and wait for someone else to act. This conversation names the one question that tells you which one you actually bought. Know the answer before it's 2am and someone's waiting on you to decide. You signed a contract for managed detection and response. You assumed that meant somebody would step in and stop an attack while it was happening. For a lot of MDR providers, what you actually bought is guided remediation. They find the incident, tell your team what to do, and hand it back to you to execute. That distinction is the entire reason you're paying for this instead of running it yourself, and most buyers don't find out which one they signed for until they're the one on the call at 2am being asked what to do next. Miles Lowry, Senior Territory Manager at eSentire, has sold cybersecurity from every seat in the market, VAR, Nutanix, Rubrik, and eSentire, and he walks through the one question that exposes the gap before you sign. This conversation also covers where the same blind spot shows up everywhere else in a typical MDR evaluation. Buyers send RFPs to eighteen vendors and get eighteen generic capability dumps back instead of a real fit assessment. Rules of engagement quietly change depending on whether the compromised machine belongs to your CEO or your help desk. It also gets into DLP requests that get approved without anyone defining what they're actually trying to stop, and security licensing already sitting in your Microsoft contract that almost nobody has turned on. The buyers with the best MDR outcomes never send a broad RFP at all. Miles names the one question he says he'd ask first if he were sitting on the buyer's side of the table. Know the answer before it's 2am and someone's waiting on you to decide. Want the exact test to run against your own contract? Read the full breakdown: How to Tell If Your Managed Cybersecurity Provider Will Actually Respond During an Attack. Find Your Situation Ten real moments from this conversation. Find the one that's actually happening to you right now, and jump straight there. Your CISO or security lead has been in the seat under two years, and you're not sure if that's a coincidence. → 21:44 You sent an RFP to eighteen vendors, and now you're buried in decks that all say the same thing. → 26:35 You can't get the budget to build the security program you're actually expected to deliver, and you know it. → 31:14 You've never checked whether a breach on your watch creates personal liability for you, not just the company. → 40:53 A vendor asked how much data you generate before you'd even deployed anything to measure it. → 42:36 You've never actually asked your MDR provider whether they act on their own or call you first. → 55:31 Nobody on your team could name, right now, who gets called first if your CEO's laptop gets hit tonight. → 57:25 Someone asked for a DLP tool and you're not sure anyone can say what it's actually supposed to stop. → 1:10:43 You've never tested whether your MDR provider can actually act without you, or whether you'd only find out during the incident. → 1:18:16 You're paying for Microsoft E5 and you have no idea if the security features in it are actually turned on. → 1:25:53 What We Get Into 26:35 Who is actually answering the RFP you think you wrote 31:14 Why CISOs use a vendor to share the blame when something goes wrong 40:53 Why most CISOs at one conference had personal liability insurance 42:36 Why "how much data do you have" is a trick question 55:31 The real MDR test: alert versus response 57:25 Your CEO's laptop, and who's actually authorized to isolate it 1:00:46 Who belongs in the room on the buyer's side and almost never is 1:10:43 The DLP request nobody asked for and nobody can explain 1:18:16 The one question to ask before you sign 1:25:53 Paying for Microsoft E5 security licensing you never turned on What We Mentioned eSentire CrowdStrike (Falcon Complete) Sentinel One Fortinet Palo Alto Cortex Microsoft Defender, Sentinel, and Entra Nutanix Rubrik Veeam Gartner NIST CSF Log4j Tenable About Miles Lowry Miles Lowry is Senior Territory Manager at eSentire, where he works directly with security leaders on managed detection and response. He's spent 14 years in enterprise technology sales, moving through VAR, Nutanix, Rubrik, and now eSentire, giving him a rare, direct view into where buyers get MDR wrong before they ever sign. LinkedIn: https://www.linkedin.com/in/cloud-ai-expert/ Company: https://esentire.com About Signed Signed is the podcast for buyers in a market built for sellers. Host Max Clark, CEO of ITBroker.com, sits down with CIOs, CFOs, operators, and founders who've lived inside real enterprise tech deals. New episodes weekly. Listen: itbroker.com/podcast About Signed The IT market is built for sellers, not buyers. Signed is the podcast for the buyers. Host Max Clark, CEO of ITBroker.com, sits down with CIOs, CFOs, operators, and founders who’ve lived inside real enterprise tech deals — the ones who can tell you what actually determined whether the deal worked, not what the deck promised. New episodes weekly. An ITBroker.com podcast. Full Transcript Click here to view the episode transcript.