Brad Dowden shares practical perspectives for CIOs and technology leaders on IT strategy, cybersecurity, identity security, AI governance and the costs of managed IT services.
Most useful for explaining operational and commercial consequences of IT, security, and AI choices to technology leaders.
Best for
A campaign for mid-market managed IT services providers wanting to be seen as strategic advisors.
Not for
AI governance, cost-management, or data-readiness campaigns aimed at private-equity fund managers and regulated financial firms.
Key takeaways
Consolidating IT under one managed service provider tends to cost more than it saves.
The era of MFA is enough is ending, with earlier deadline September 2026.
UK cyber regulation targets IT suppliers, so mid-market clients absorb cost and risk.
Check first: Confirm audience location, job titles, buying influence, and recent post-level engagement before estimating campaign results.
Main ideas
Consolidating IT under one managed service provider tends to cost more than it saves · The era of “MFA is enough” is ending, and the earlier deadline is September 2026 · UK cyber regulation targets IT suppliers, so mid-market clients absorb the cost and the risk
Brad Dowden writes about technology decisions facing CIOs and business leaders, including managed IT services, cybersecurity, identity security, and AI governance.
Their posts focus on what changes mean for organizations: how to assess an MSP relationship, prepare for a move from SMS authentication to passkeys, and weigh AI costs and risks.
A post on the UK Cyber Security and Resilience Bill applies the same lens to regulation, asking how new obligations on providers could affect their business customers.
Dowden connects technical or policy developments to decisions leaders can act on.
The Entra post turns authentication changes into a five-part preparation list, including user migration and account recovery.
The MSP post is more personal and argumentative: they explain how their view of single-provider consolidation changed, then describe risks such as vendor-aligned recommendations and costly exits.
The AI panel summary takes a different format, organizing a discussion around costs, measurable returns, governance, and workforce changes rather than offering a single conclusion.
Together, these examples make the work useful to readers who want to understand the operational and commercial consequences of technology choices, not just the technology itself.
Brad Dowden writes short-form commentary for CIOs, CISOs and technology leaders, with a consistent focus: helping people defend technology decisions to a board.
Read more
Their posts question whether managed IT spend delivers value, treat vendor announcements as deadlines for strategy reviews, examine how regulation targeting suppliers can raise costs for clients, and urge regulated firms to measure AI costs and returns before scaling it.
Consolidating IT under one managed service provider tends to cost more than it saves
Dowden once believed that consolidating a technology landscape with a single managed service provider was the right move: it shifted day-to-day complexity to a third party, brought service-level agreements with teeth and gave the business “one throat to choke” when something broke.
Read more
They no longer believe or recommend it.
They list recurring failures across organisations of all sizes: overpaying for services; being sold products chosen to match the provider's supplier affiliations rather than the client's needs; lacking anyone internally with the expertise to challenge vendor advice or benchmark prices; and becoming so reliant on a provider that leaving is difficult or too expensive, allowing unnecessary costs to continue year after year.
The case against consolidation is that it can stop buyers testing whether the spend is worth it—not that providers are uniformly bad.
Across the clients they have worked with, Dowden says, they averaged annual savings of 30% on technology spend while getting better services, upgraded capabilities and more control over their own direction.
They ask readers to imagine what those savings could fund over three years: a project with no budget, cashflow relief, hiring or experimentation with AI.
Dowden says the post is not a war on managed service providers and that providers cannot all be put in the same bucket.
The figures reflect their personal experience; no clients or providers are named.
Dowden explains what they used to recommend, why they changed their mind and why they no longer endorse it. Labelled Part 1, the post closes by inviting readers to a follow-up.
The era of “MFA is enough” is ending, and the earlier deadline is September 2026
Dowden argues that Microsoft's retirement of SMS and voice authentication in Entra ID is a reason to review an organisation's whole authentication strategy, not just another configuration change.
Read more
SMS multi-factor authentication was a major improvement over passwords alone, but they say it remains vulnerable to phishing, SIM-swapping, social engineering and replay attacks.
Passkeys, by contrast, are built to be phishing-resistant by default.
The key is sequencing: waiting for vendor prompts to drive adoption puts the migration on the vendor's timetable rather than the organisation's assessment of its own identity risk.
Dowden also treats registration experience, staff communication and account recovery as part of the security work.
Dowden lays out the timeline: Microsoft-provided SMS and voice authentication in Entra ID retires on 1 February 2027.
From 1 September 2026, users currently enabled for SMS or voice will be automatically enabled for passkeys and prompted to register one when completing multi-factor authentication.
They give technology leaders five actions: identify how many users still rely on SMS or voice, especially privileged accounts, executives, contractors and legacy applications; begin migrating in controlled groups before September rather than waiting for Microsoft's prompts; consider user experience and communication alongside the technology; check what happens when someone loses a device or needs credentials reset; and use the change to review Conditional Access, privileged access, dormant accounts and authentication methods together.
The closing question: is the organisation's authentication actually resistant to phishing?
UK cyber regulation targets IT suppliers, so mid-market clients absorb the cost and the risk
Dowden argues that the Cyber Security and Resilience Bill matters even to businesses that will never be regulated by it.
Read more
The Bill had reached Committee stage in the House of Lords and, for the first time, brings medium and large managed service providers and data centres into direct regulation.
These are the same providers on which a large share of mid-market businesses rely for day-to-day IT.
Reporting duties and fines fall on the supplier, but the consequences can reach clients: if a provider mishandles an incident or raises prices to cover the new compliance burden, clients feel the effects without having had a say in the compliance decision.
Dowden frames this as a board-level question of supplier accountability and cost exposure, not a technical compliance problem.
Drawing on the government's own factsheets, Dowden outlines the proposed requirements: incidents reported to the regulator within 24 hours of being spotted, a full report within 72 hours, and fines of up to £17 million or 4% of global turnover for the most serious breaches. They then give board-level readers one question to ask their IT supplier about how the changes affect them.
Regulated firms cannot manage AI spend they never measured
Dowden argues that firms cannot say what they spend on AI, and fewer still can say what they get back.
Read more
Cost control, returns, governance, trust and security belong in one conversation for a regulated firm, alongside how AI changes roles and operating models.
Treating AI as a technology experiment separate from cost and governance creates blind spots.
Dowden makes this case around a panel: the specific observations belong to the panellists, while the framing and questions for readers are theirs.
Dowden recaps a panel they joined with Henry Duncombe and Dan O. of Lanware, Adrian Bolton of GHO Capital and Walid Al Saqqaf of Rebalance Earth, titled “The True Cost of AI: A Reality Check for Fund Managers”.
They list what the group covered: what AI really costs and how to control it; return on investment and where AI delivers measurable value; hidden costs and mistakes that undermine it; governance, trust and security inside a regulated firm; and how AI changes roles and operating models.
Dowden credits the other panellists for their input and experiences.
The post closes with a poll asking readers to identify their firm's biggest AI blind spot: knowing what they actually spend, data that is not ready, people and training, or measuring any return at all.
This answers “What does Brad Dowden think is wrong with how mid-market companies buy managed IT?” and presents a concrete, opinionated argument that newcomers can evaluate before reading more of their work.
Read more
Brad Dowden describes changing their mind about consolidating IT support with a single managed service provider.
They explain the original appeal—moving day-to-day management to a third party, gaining strong service-level agreements, and having “one throat to choke”—then list problems they now see: businesses overpaying, being sold vendor-aligned products rather than fit-for-purpose ones, lacking internal expertise to challenge advice, and finding it too difficult or expensive to leave an embedded MSP.
They say they have averaged annual savings of 30% across tech spend for clients they have worked with.
For brands planning a campaign
A mid-market MSP positioning itself as a strategic advisor can use this post as a direct hook: it names buyers’ fears about incumbent providers and supports a counter-positioning angle around independent benchmarking, transparent pricing, and exit-friendly contracts.
The post explains a specific, dated platform change that affects many organizations and shows how they turn vendor news into actionable guidance for CIOs and technology leaders.
Read more
Brad Dowden reports Microsoft’s plan to retire SMS and voice authentication in Entra ID by 1 February 2027, with users automatically enabled for passkeys and prompted to register one from 1 September 2026. They frame this as a trigger to review wider authentication strategy, explain why SMS MFA remains vulnerable to phishing, SIM-swapping, social engineering, and replay attacks, and list five actions for technology leaders: understand exposure, migrate before September, look beyond the technology, check recovery processes, and use the change to reduce identity risk.
For brands planning a campaign
A content partnership could turn this vendor change into a practical migration checklist for mid-market IT buyers, positioning the MSP as a guide through authentication decisions rather than just a reseller of passkey tools.
It answers “How does Brad Dowden talk about AI in regulated businesses?” and maps the questions finance and technology leaders are asking about AI cost, governance, and return.
Read more
Brad Dowden summarizes a panel they joined with Lanware, GHO Capital, and Rebalance Earth about AI costs and governance.
They list the topics covered: what AI really costs and how to control it, ROI and where AI delivers measurable value, hidden costs and mistakes, governance, trust and security in a regulated firm, and how AI changes roles and operating models.
The post ends by asking which AI blind spot is biggest: knowing actual spend, data readiness, people and training, or measuring any return.
For brands planning a campaign
For an MSP or agency targeting mid-market IT and finance leaders, this piece shows Dowden can convene and distill a peer discussion on AI governance—useful evidence for a co-hosted webinar, executive roundtable, or sponsored research on AI cost control.
It shows how Dowden connects UK policy to practical consequences for mid-market IT buyers and offers a clear example of their regulatory analysis style.
Read more
Brad Dowden explains that the UK Cyber Security and Resilience Bill, now at Committee stage in the House of Lords, will bring medium and large managed service providers and data centres into direct regulation.
They note the proposed requirements: incidents reported to the regulator within 24 hours, a full report within 72 hours, and fines up to £17 million or 4% of global turnover for the most serious breaches.
Their central point is that mid-market businesses relying on MSPs may feel the impact through their provider’s compliance burden or price increases, even though they are not the regulated entity.
For brands planning a campaign
This is a timely hook for an MSP to publish buyer guidance on what the Bill means for clients and how to choose a provider that can absorb regulatory change without passing on unnecessary cost or risk.
Recurring format: one sharp claim, a list and a question for the reader4
Managed IT consolidation and what mid-market firms overpay for1
Phishing-resistant authentication and the end of “MFA is enough”1
UK cyber regulation and the compliance cost pushed onto mid-market buyers1
The true cost of AI: spend visibility, ROI and governance in regulated firms1
Managed IT consolidation and what mid-market firms overpay for
In a two-part post framed as an “uncomfortable truth”, Dowden recalls believing that consolidating a technology landscape with a single managed service provider was the right move: fewer vendors, service-level agreements with teeth and “one throat to choke”.
Read more
They no longer recommend it.
The post lists recurring failure patterns: overpaying for services; being sold products that suit the provider's supplier affiliations rather than the client's needs; lacking a senior technology lead who can challenge vendor advice or benchmark prices; and becoming so embedded with a provider that leaving is difficult or too expensive, driving costs year after year.
Dowden reports averaging 30% annual savings on technology spend across clients worked with, and lists what that money could fund: deferred projects, cashflow relief, hiring and AI experiments.
The post closes with an invitation to DM about Part 2.
A career reversal leads into a checklist of observed failure patterns, a headline figure (30% average savings) and a direct-message call to action. Framed as Part 1, the post is designed as a series rather than a one-off.
Dowden says this is not a war on MSPs and that providers cannot all be lumped together. The claim draws on personal experience across unnamed employers and providers, with no client names or supporting data. Ask for evidence behind the savings figure before using it in a campaign.
For brands planning a campaign
This is the strongest opening for an MSP or IT advisor brief: Dowden argues that mid-market buyers are poorly served by passive vendor relationships and need someone who can challenge spending.
A partner must engage with that critique rather than publish generic “trusted advisor” copy; Dowden's framing puts incumbent providers on the defensive.
The 30% savings claim offers a natural anchor for a co-created technology-spend benchmarking asset.
Phishing-resistant authentication and the end of “MFA is enough”
Dowden reports that Microsoft-provided SMS and voice authentication in Entra ID retires on 1 February 2027.
Read more
The earlier date to watch is 1 September 2026, when users enabled for SMS or voice will be automatically enabled for passkeys and prompted to register one during multi-factor authentication.
The post argues that technology leaders should treat this not as another Microsoft configuration change but as a trigger to review their whole authentication strategy.
SMS MFA remains vulnerable to phishing, SIM-swapping, social engineering and replay attacks, while passkeys are designed to be phishing-resistant by default.
Dowden sets out five actions: map exposure, especially for privileged accounts, executives, contractors and legacy applications; migrate in controlled groups before September rather than waiting for Microsoft prompts; treat registration experience and communication as part of the security work; check device-loss and credential-reset recovery processes; and review Conditional Access, privileged access, dormant accounts and authentication methods together.
The closing question asks whether the organisation's authentication is actually resistant to phishing.
A dated news trigger, two specific deadlines and a numbered five-step action list lead to a question that shifts the reader from compliance to strategy.
For brands planning a campaign
A dated, vendor-neutral security migration offers a strong basis for a partner asset aimed at CIOs and CISOs: checklists, migration-readiness guides and webinars fit the post.
The September 2026 and February 2027 dates give a campaign a real clock.
Sponsorship should remain neutral on identity vendors; Dowden's advice focuses on exposure, sequencing and recovery processes rather than product selection.
UK cyber regulation and the compliance cost pushed onto mid-market buyers
Dowden explains that the Cyber Security and Resilience Bill has reached Committee stage in the House of Lords and, for the first time, brings medium and large managed service providers and data centres into direct regulation.
Read more
Many mid-market businesses depend on those providers for day-to-day IT.
Drawing on the government's own factsheets, Dowden outlines the requirements: incidents must be reported to the regulator within 24 hours of being spotted, a full report is due within 72 hours, and the most serious breaches can bring fines of up to £17 million or 4% of global turnover.
The post highlights the indirect exposure for clients: if a provider mishandles an incident or raises prices to absorb the new compliance burden, the client feels the impact despite not being regulated.
It ends by urging board-level readers to ask their IT supplier a single question about this.
A regulatory explainer draws on government factsheets and translates them into consequences for businesses that are not themselves in scope.
A one-question call to action targets boards rather than technical teams.
Wide-spaced bold typography adds emphasis.
For brands planning a campaign
Regulation is a shared, dated external event, making it easy for a brand to co-create timely content without manufacturing a hook.
The pitch is board-facing—risk, cost and supplier accountability rather than controls—so it suits advisory, legal, insurance or MSP partners selling to mid-market leadership.
Campaigns should address buyers' exposure through their suppliers, not their own compliance obligations.
The true cost of AI: spend visibility, ROI and governance in regulated firms
Dowden opens by asking what AI actually costs, noting that most firms cannot say what they spend on it and fewer can say what they get back.
Read more
The post recaps a panel they joined with Henry Duncombe and Dan O. of Lanware, Adrian Bolton of GHO Capital and Walid Al Saqqaf of Rebalance Earth, titled “The True Cost of AI: A Reality Check for Fund Managers”.
Topics included cost and cost control; where AI is delivering measurable value; the hidden costs and mistakes that undermine it; governance, trust and security inside a regulated firm; and how AI changes roles and operating models.
The post closes with a four-option poll asking where a firm's biggest AI blind spot lies: knowing what is actually spent, data that is not ready, people and training, or measuring any return at all.
A conference or panel recap pairs a cost-opacity hook with a bulleted list of discussion themes, acknowledgements of the other panellists and an audience poll. The recurring #TheCIOCircle hashtag signals a community context.
For brands planning a campaign
This is Dowden's clearest AI-and-private-equity content and shows a willingness to appear on sponsored panel formats with named co-panellists. The post addresses fund managers and regulated-firm leaders concerned about unmeasured AI spend, making it a fit for an AI governance, data-readiness or cost-management partner.
Recurring format: one sharp claim, a list and a question for the reader
Across the posts, the structure repeats: a short provocative opener (“SMS-based MFA now has an expiry date”, “What is the true cost of AI?”, “An uncomfortable truth”), a personal or news hook, a bulleted or numbered body with the substantive detail, and a closing question or invitation that hands the next move to the reader.
Read more
The subjects cluster around decisions technology leaders must defend to a board: what vendor spend buys, how authentication is changing, what new regulation means for non-regulated buyers, and whether AI delivers measurable returns.
All four posts are LinkedIn-native text.
Long-form work appears only by reference: a panel recording Dowden offers to link and a promised Part 2.
The public-facing material is short-form commentary rather than articles or newsletters.
A repeatable short-form template pairs a defined opener with a list and closer. Series framing and direct-message invitations extend engagement beyond the post.
The posts show an appearance on a partner panel and use of a community hashtag. Ask directly which sponsorship formats and commercial arrangements are available.
For brands planning a campaign
Material needs to hold up as a one-line hook plus a short list, so assets built around a specific dated trigger, cost figure or risk number travel best. Campaigns should plan for comment-thread and direct-message follow-up, since the posts route interested readers away from the feed.
The only relationship Brad Dowden discloses directly is a panel appearance hosted by Lanware.
Other brand names appear as vendors, community hashtags or fellow panellists’ employers, not as Dowden’s partners.
They write about technology strategy for CIOs and mid-market buyers and, in the MSP post, describe advisory work with clients.
Ask which business they advise and what commercial terms apply.
Lanware
Disclosed partnership
Brad Dowden appeared on a Lanware panel, “The True Cost of AI: A Reality Check for Fund Managers”, alongside Lanware’s Henry Duncombe and Dan O., Adrian Bolton of GHO Capital and Walid Al Saqqaf of Rebalance Earth.
Read more
The post discloses the appearance and panel topic but states no payment, sponsorship or ongoing contract.
Microsoft is discussed as a platform vendor, not a partner.
Read more
The post says Microsoft confirmed that Microsoft-provided SMS and voice authentication in Entra ID will retire on 1 February 2027, and lists steps CIOs should take before the September 2026 automatic passkey enrolment. No commercial relationship is stated.
Brad Dowden writes short LinkedIn decision briefs for people who must defend technology choices to a board.
Read more
In one post, they argue against consolidating IT under a single managed service provider, outlining where mid-market buyers lose leverage and what that costs.
Other posts cover Microsoft's retirement of SMS and voice authentication and the UK Cyber Security and Resilience Bill.
An AI panel recap applies the same focus on spend, return and governance to regulated firms.
These posts offer board-facing questions, cost and risk framing, and practical checklists rather than product tutorials.
Ask for the referenced follow-up material, which is not included in the posts.
Managed service provider consolidationTechnology spend benchmarkingPhishing-resistant authenticationIdentity and access strategyUK cyber regulationAI cost and governanceLinkedIn commentaryPanel discussionCIOs and technology leadersMid-market business leadersPrivate equity fund managers
Both write for Microsoft identity and security practitioners, using LinkedIn posts to explain changes in Entra ID and authentication in practical terms.
Read more
Gomes points readers to step-by-step video walkthroughs and channel resources; Dowden offers short written briefs for technology leaders weighing risk, cost and supplier decisions.
Both use LinkedIn to convene free educational sessions for cybersecurity audiences and translate a broad field into practical entry points.
Read more
Akpan's career-focused material includes webinars on SOC, penetration testing, GRC and cloud security, and on becoming job-ready. Dowden addresses leaders making decisions about suppliers, authentication strategy and regulation.
Both address Microsoft 365, Entra ID and Intune operating questions for organisations without large IT teams, explaining the reasoning behind each configuration.
Read more
McMillan documents hands-on builds and operating metrics from running IT directly; Dowden focuses on procurement, supplier accountability and board-level risk.
The posts support a cautious yes on audience: Brad Dowden has about 14,290 LinkedIn followers, and the content focuses on professional groups relevant to a campaign targeting managed IT services providers.
Read more
Brad Dowden's LinkedIn profile reports 14,290 followers as of 11 October 2026 — the only audience-scale figure published in the posts.
The posts mention no other channel, such as a newsletter or YouTube audience, and publish no demographic information or survey covering geography, age, gender, employer, occupation, job seniority, or company size.
The four posts, dated 11 August, 7 September, 11 September, and 23 September 2026, address CIOs and technology leaders directly.
Topics include Microsoft Entra SMS and voice MFA retirement, passkey migration planning, UK Cyber Security and Resilience Bill obligations on managed service providers, MSP consolidation and overspend, and AI cost and governance for fund managers.
One post says Brad Dowden spoke on a Lanware panel titled "The True Cost of AI: A Reality Check for Fund Managers" alongside people from GHO Capital and Rebalance Earth.
The subjects point to professional circles that include enterprise IT leadership, mid-market IT buyers, and private-equity and fund-management audiences, but do not establish who reads or follows the account.
For a campaign targeting managed IT services providers, that distinction matters.
The content aligns closely with provider themes — MSP consolidation risk, authentication strategy, and UK cyber regulation affecting mid-market IT buyers — and the panel context suggests relevance to people who make or influence those decisions.
But the posts do not confirm whether followers are UK-based, hold CIO or equivalent titles, work at mid-market firms, or are close to a buying decision.
Ask for evidence of audience location, job titles, and buying influence before estimating campaign results.
Ask whether LinkedIn follower demographics are available, and request an audience survey or other documented source covering job role, seniority, company size, and geography — attributes a follower count cannot reveal.
Also request recent post-level engagement on MSP consolidation, authentication, and UK cyber regulation to compare like-for-like topics rather than relying on the profile total.
If those figures are thin, position the partnership as a credibility and content-association play rather than a reach play.
LinkedIn followers
14,290
Displayed follower count on the LinkedIn account that published the reviewed posts · 2026-10-11
Across four Brad Dowden LinkedIn posts, no sponsorship packages, media kits, published rates, advertising formats or partnership inquiry routes are described.
Read more
The posts do show a different kind of collaboration: on 23 September 2026, they appeared on a vendor-hosted panel, “The True Cost of AI: A Reality Check for Fund Managers,” run by Lanware alongside Henry Duncombe and Dan O. of Lanware, Adrian Bolton of GHO Capital and Walid Al Saqqaf of Rebalance Earth.
The panel covered AI cost control, return on investment, governance and security in regulated firms.
Other posts carry the #TheCIOCircle tag, including the AI panel post and one about the UK Cyber Security and Resilience Bill reaching Committee stage in the House of Lords.
For a managed IT services provider planning a content partnership, the posts offer no terms to plan against.
Ask directly about available formats, lead times, editorial control and rates.
The campaign topics align with subjects they already write about at length: managed service provider consolidation and overspend (11 September 2026), Microsoft Entra retiring SMS and voice authentication and the phishing-resistant shift to passkeys (11 August 2026), and the Cyber Security and Resilience Bill bringing mid-market managed service providers and data centres into direct regulation (7 September 2026).
A campaign aimed at mid-market managed IT services providers seeking to be seen as strategic advisors rather than vendors is a strong fit.
Read more
Three of the four posts speak directly to that goal.
The MSP consolidation post (11 September 2026) is the strongest match: Brad Dowden describes having once recommended consolidating IT with one provider — fewer vendors, tough service-level agreements, “one throat to choke” — and says they no longer recommend it.
Instead, they list the patterns they see: clients overpaying for services, products sold to suit a provider's supplier affiliations rather than the client's needs, no internal person senior enough to challenge vendor advice or benchmark prices, and providers so embedded that leaving is too difficult or expensive.
Dowden reports averaging 30% annual savings on technology spend across clients worked with.
An MSP that wants to be trusted as an advisor has to be willing to publish that critique, including the part that puts incumbent providers on the defensive.
That makes the fit real rather than nominal.
The other two posts offer timely hooks for a partnership.
The authentication post (11 August 2026) turns Microsoft's retirement of SMS and voice authentication in Entra ID into a five-step planning list for technology leaders, with the September 2026 passkey enrollment date and February 2027 retirement giving the campaign a clock.
The regulation post (7 September 2026) explains that the Cyber Security and Resilience Bill, at Committee stage in the House of Lords, brings medium and large managed service providers and data centres into direct regulation, with 24-hour incident reporting, a 72-hour full report, and fines up to £17 million or 4% of global turnover.
It argues that mid-market clients will feel the consequences through their provider's compliance burden or price rises, even though they are not the regulated party.
For an advisor-positioning MSP, that is a ready-made argument for choosing a provider that can absorb regulatory change without passing on unnecessary cost or risk.
Two limits should shape the decision.
The only scale figure is a LinkedIn follower count of about 14,290 observed on 11 October 2026; there are no demographics for geography, job title, seniority, or company size.
Reach into UK mid-market IT decision-makers is plausible from the subject matter but unproven.
Ask for audience data before treating reach as a campaign outcome.
No sponsorship packages, rate card, media kit, or inquiry route are published, so agree terms, lead times, and editorial control directly.
Treat this as a credibility and content-association play first, with reach to be tested rather than assumed.
When to choose a specialist
A campaign aimed at AI governance, AI cost-management, or data-readiness vendors trying to reach private-equity fund managers and leaders in regulated financial firms is a materially weaker fit.
Read more
The only relevant post (23 September 2026) recaps a Lanware panel titled “The True Cost of AI: A Reality Check for Fund Managers,” which Brad Dowden joined alongside people from Lanware, GHO Capital, and Rebalance Earth.
The post shows Dowden can convene and summarise a peer discussion on AI spend, returns, hidden costs, governance, and security inside a regulated firm.
It offers a reasonable hook for a co-hosted webinar, executive roundtable, or sponsored research piece, but little basis for a campaign decision on its own.
The post is a recap, not an argument: it lists topics covered and closes with a four-option poll about a firm's biggest AI blind spot.
A partner would be buying association with a discussion Dowden hosted, not a body of work on AI in regulated finance.
The campaign targets fund managers and regulated-firm leadership, but it is unclear whether Dowden's roughly 14,290 LinkedIn followers include private-equity or fund-management professionals.
The panel shows the circles the content circulates in, not who follows or reads the account; no audience survey was available.
The AI post also carries the #TheCIOCircle community tag, pointing to a technology-leadership context rather than a finance-buyer one.
Ask for follower demographics or an audience survey before planning around a finance audience.
There are four short-form LinkedIn posts, with no newsletter, YouTube, or article posts, and no published formats or rates or disclosed commercial relationships.
Test the campaign cheaply against the one clearly relevant post; don't scale it on the strength of the current posts.
A broad-reach brand-awareness campaign is also a poor fit: there is a follower figure, but no measured reach or engagement data.
A worked campaign example
A campaign aimed at MSPs could run as a three-part co-created series from the buyer's side of the table, built around the three posts Dowden has already written and dates already in the market.
The series should lead with the consolidation argument from the 11 September post, the clearest claim a buyer can act on.
Frame the first asset as a technology-spend review for mid-market leadership: what firms typically overpay for, how supplier affiliations shape the advice they receive, and why leaving an embedded provider is often too expensive.
The reported average savings of 30% is the headline.
The partnering MSP should publish its own methodology alongside it — how spend is benchmarked, what categories are compared, and what a fair price looks like — or the claim risks reading as a slogan rather than an offer.
A short benchmark worksheet, with a worked example and a blank version, is a natural companion resource readers can use without the article.
The second asset should follow the authentication clock.
Dowden's post sets out five actions for technology leaders: understand exposure, especially for privileged accounts, executives, contractors, and legacy applications; migrate in controlled groups before September rather than waiting for Microsoft's prompts; treat registration experience and communication as part of the security work; check device-loss and credential-reset recovery processes; and use the change to review Conditional Access, privileged access, dormant accounts, and authentication methods together.
A partner can turn that into a dated migration-readiness checklist and a short executive briefing, staying vendor-neutral on identity products because the guidance concerns exposure, sequencing, and recovery rather than product selection.
That neutrality supports the campaign's credibility as an advisor-positioning MSP.
The third asset should take the regulation argument to the board.
The 7 September post puts the Bill's requirements and penalty range on the record and makes the case for indirect exposure: the client is not the regulated party but pays for the provider's compliance burden or price rises.
A one-question board prompt — what does our IT supplier's regulatory position mean for our cost and our risk — can close the series and stand alone in a sales conversation.
Run the spend review first, because it is the most differentiated and most likely to provoke replies; the authentication piece second, timed against the September 2026 enrollment date; and the regulation piece third, tracking the Bill's progress through the Lords.
Keep all three text-led: every post is short-form LinkedIn text with a sharp opener, a list, and a question back to the reader.
Longer-form work appears only by reference, so agree explicitly on any article or report rather than assuming it fits the creator's publishing style.
Before committing budget, ask for post-level engagement on the consolidation, authentication, and regulation topics, so like-for-like interest can be compared, and for any available follower demographics or audience survey covering job role, seniority, company size, and geography.
Ask for available formats and rates as well.
If engagement on these three topics is thin or the audience cannot be described, run one sponsored credibility piece — most likely the spend review — rather than a series, and don't treat the follower count as proof of a mid-market IT buyer audience.
The analysis is based on four full LinkedIn posts dated between 11 August and 23 September 2026; the AI panel post is the only post about the fund-management audience, and it is a recap rather than developed analysis.
Choose Sebastain Gomes when the partnership needs to teach identity and Microsoft security mechanics rather than argue market position.
Read more
Gomes's posts offer a video-led explainer on Authentication Context in Entra ID — c1/c2 values, Conditional Access, step-up authentication, configuration and testing — and a channel milestone post promising Azure, Entra, Microsoft 365, cloud and security topics. For an MSP trying to make authentication migration concrete for technical readers, a co-created walkthrough or video series on passkeys, Conditional Access and step-up authentication would fit the campaign subject, with more implementation detail than Dowden's five-step planning post.
The tradeoff is scope.
Brad Dowden's posts show technical education and a learning community, not analysis of MSP consolidation economics, procurement or UK cyber regulation.
For a campaign built around implementation credibility, Gomes offers more than Dowden's distinctive advisor argument.
Choose Raymond Akpan when the campaign goal is cyber skills, career pathways or community reach rather than a buyer-facing advisory position.
Read more
Both of Akpan's posts promote a free webinar on SOC, penetration testing, GRC and cloud-security careers, and describe Akpan as cybersecurity ecosystem lead for ELITE 247 TECH HUB. For an MSP that wants to build a local talent pipeline, sponsor entry-level training or reach career switchers, Akpan is a more direct match than Dowden, whose posts address technology leaders and business spend.
The tradeoff is the audience and the argument.
Raymond Akpan's posts promote events and offer career guidance; they do not examine MSP consolidation, authentication strategy for executives or regulatory cost transfer to mid-market clients.
A partnership would build community and workforce association, not strategic-advisor content for buyers choosing an IT provider.
Choose Cole McMillan when the campaign needs a first-person operating model rather than a market argument.
Read more
McMillan's two posts describe moving a 150-user, multi-site Microsoft 365 environment to direct licensing; building identity attributes and dynamic groups in Entra ID; and deploying Intune, BitLocker, Defender, firewall, update rings, compliance policies, LAPS and Conditional Access in report-only mode before enforcement.
The second post recounts explaining to VP- and director-level IT leaders how one person runs IT for 150 users with no MSP, using centralized intake and automation, with reported results of about 4x ticket volume, 90% faster initial response and 60% faster resolution.
For a campaign about lean internal IT, Microsoft-stack standardization or the practical case for operating without an MSP, McMillan gives the same buyer a concrete build story that Dowden's consolidation critique does not.
The tradeoff is that McMillan's posts are an operational build log, not advice for mid-market buyers choosing or challenging a provider.
For a sponsor seeking to position itself as a strategic advisor, McMillan offers implementation detail and a no-MSP narrative, but not Dowden's willingness to name provider misalignment and cost.
Ask whether the room of IT leaders described in one post matches the intended audience.
This profile draws on four LinkedIn posts by Brad Dowden, covering a two-part argument on managed service provider consolidation and technology spend, Microsoft retiring SMS and voice authentication in Entra ID, the UK Cyber Security and Resilience Bill's effect on mid-market IT buyers, and a Lanware panel on the cost, return and governance of AI in regulated firms.
Dates and sequencing come from details inside the posts and from earlier sections of this profile, because post timestamps were not included in the posts.
The available material is short-form LinkedIn text: a panel recording Dowden offers to link, a promised continuation of the consolidation post, audience demographics, post-level engagement figures, a media kit or rate card, and any long-form articles or newsletters are not available.
Those gaps are noted where they affect how far a conclusion can be drawn and should be resolved before a commercial decision is made on reach or terms.
