# Matthew Bagley

Matthew Bagley shares practical guidance on managing technology for small and midsize businesses, including IT planning, ransomware recovery, and responsible AI use. The posts also connect technology planning with the EOS business framework.

- Profile: https://b2binfluencer.marketing/creators/matthew-bagley/
- LinkedIn: https://www.linkedin.com/in/matthewabagley
- Topics: artificial-intelligence, cybersecurity, ai-governance
- Based on 14 dated posts, latest 2026-09-21

## Summary

Matthew Bagley is useful for practical SMB technology content on IT planning, ransomware recovery, and AI governance.

- Best for: This fits a managed IT services company seeking content collaboration on SMB technology strategy.
- Not for: This does not fit a global enterprise AI platform seeking CISO-level AI governance thought leadership.
- Check first: Confirm recent audience data and any documented survey results before contacting them.

### Takeaways

- Technology planning can follow the company's existing operating rhythm, such as EOS routines.
- Ransomware recovery planning includes offline backups, tested playbooks, employee scam testing, and insurance-style preparation.
- AI governance for small businesses should address confidential data, copyright, privacy, transparency, and discrimination.

## Main ideas

- **Technology planning should follow the company’s existing operating rhythm**: Bagley argues that technology becomes a problem when it sits outside the way a business already plans and reviews work. For a company running on EOS—the management system built around Level 10 meetings, Rocks, and Quarterly Conversations—the answer is not a separate IT process but a translation into the vocabulary the team already uses. A technology roadmap becomes an owner-tagged issues list, ready for the same identify-discuss-solve treatment as other business problems. A 90-day technology review becomes the quarterly conversation that sets the next IT priorities. When technology follows the same rhythm as the rest of the business, it stops hijacking traction. Bagley says the Visionary can focus on growth, the Integrator can keep operations moving, and the “accidental IT person” can get their day job back.
- **Security spending is a budget question before it is a technical one**: Bagley’s ransomware argument starts with cost, not products. Citing an average hit to small and midsize businesses of $120,000 to $1.2 million once downtime, recovery, and lost business are counted, they frame resilience as something to fund and insure, not a checkbox to tick. Basic file backup does not cover this risk: the money needs to go toward full business continuity, including offsite or offline copies that ransomware cannot encrypt and recovery playbooks that have been tested, not just written. The comparison to insurance makes the case: many small firms could not survive an extended outage, so preparedness belongs alongside routine, unglamorous spending such as a policy premium.
- **AI governance should shrink to fit a small business, not be skipped**: Bagley’s third argument is that governance is no longer just a big-company concern. Once ChatGPT and AI-driven analytics are in everyday use, a small business faces the same questions as a large one: how to use AI responsibly, ethically, and legally. The answer is to write down a few decisions, not hire a compliance department. Those decisions include whether employees may paste confidential data into a chatbot, how to use AI-generated content without infringing copyright, whether customer data reaches external AI services, whether a recommendation can be explained, and whether AI used in hiring or lending could discriminate. Without guardrails, a small firm risks a regulatory breach or a loss of customer trust from a single careless use. Bagley’s prescription is deliberately modest: a simple plan endorsed by leadership and updated as the law changes.

## Work to read

- [Mapping the EOS toolkit onto IT planning](https://www.linkedin.com/posts/matthewabagley_eos-traction-smb-activity-7344371710239948801-9nT7)
- [What a ransomware incident costs an SMB, and what recovery planning should include](https://www.linkedin.com/posts/matthewabagley_got-120000-up-to-12-million-to-waste-activity-7351979423207673859-r26C)
- [AI governance for small businesses](https://www.linkedin.com/posts/matthewabagley_ai-governance-is-no-longer-just-a-big-company-activity-7356398787994521602-MHSo)

## Brand relationships

- **Prosper IT** (disclosed_partnership)
- **EOS** (mention)

## Partnerships

Matthew Bagley’s posts document no creator sponsorship or partnership program. Published under Prosper IT, they offer services to small and midsize businesses making technology decisions—not sponsor terms, rate cards, or packaged collaboration formats. Each post invites a direct message or comment, and one links to a self-published one-page resource on aligning IT planning with the EOS operating framework. These are routes into a conversation about IT services, not published terms for a content partnership. Brands considering a paid collaboration should ask directly about terms; the posts set none.

## Alternatives

- Bartosz Jurga: Consider Bartosz Jurga instead if the managed IT services company wants the collaboration to focus specifically on software supply-chain security and recovery for development teams. One post explains how a compromised package can reach CI/CD systems and expose deployment secrets, then points to controls such as version pinning, least-privilege access, credential rotation, and immutable backups. Another frames ransomware payment as a board-level decision and discusses isolated backups and tested recovery. These examples offer a more technical, DevOps-centered campaign than Matthew Bagley’s broader SMB technology-planning material.
- Sandra Roberts, CSM, CySA: Consider Sandra Roberts instead if the same managed IT services company wants the collaboration to emphasize how cybersecurity leaders explain risk and investment to senior leadership. A post on CISO priorities connects security spending to business goals, reputation, privacy, AI, workforce awareness, and compliance. Another argues that boards and executive leaders should sustain quantum-readiness roadmaps across CISO turnover. That material may suit an executive-facing cybersecurity campaign better than Bagley’s practical SMB technology-planning examples.
- Michael Abtar, LLB (Hons), PGDip.Law, Cert.DPO: Consider Michael Abtar instead if the collaboration needs a sector-specific cybersecurity overview for healthcare, pharmaceuticals, or financial services. The posts list risks and mitigations involving clinical-trial data, connected medical devices, financial-services cloud risk, account takeovers, and supply-chain attacks. Those examples offer more industry-specific subject matter than Bagley’s general SMB technology-planning posts.

---
AI-assisted summary of public posts. Audience demographics are not available. Engagement appears only where we checked recent posts. Method: https://b2binfluencer.marketing/methodology/