Stop Acting Like the Business You Have Not Built Yet

image

I see small businesses copy the visible habits of large organisations all the time. They add layers of approval, build elaborate reporting packs, hold more meetings and spend weeks choosing systems. It looks professional. It feels mature. It also creates a dangerous illusion: activity starts to look like progress.

I have learned to ask a much less glamorous question. What happened this week that could produce revenue?

That question strips away a lot of theatre.

Revenue work comes before corporate work

A large company can afford roles, committees and processes because it already has customers, cash flow and momentum. Those things are the result of growth, not the starting conditions for it.

When I am working in a smaller business, I cannot borrow the operating model of an organisation with thousands of customers and expect it to create the first hundred. I need to concentrate on the work that creates conversations, proposals and signed agreements.

That does not mean ignoring service quality, security, finance or delivery. It means recognising the order of operations. Revenue keeps the lights on. Everything else depends on it.

I would rather see a simple sales habit followed every day than a beautiful strategy document opened once a quarter.

Put a number beside the work

Vague goals are comfortable because they are hard to fail. “Do more marketing” can mean almost anything. “Grow the business” sounds important but gives me nothing useful to do at 9.00 on Tuesday morning.

I prefer measures that create a daily behaviour and a weekly outcome.

How many worthwhile prospects did I identify today? How many genuine conversations did I start? How many opportunities moved to a clear next step? What did I actually close this week?

The exact target will vary. The discipline should not.

I can make this visible with tools I already use. I might keep a small pipeline in Microsoft Lists or Excel, add the next action and owner, then review it in Teams. Before the weekly sales check-in, I can ask Copilot to summarise the relevant Outlook threads and identify where a prospect is waiting for a response. That removes administration from the process without pretending administration is selling.

Copilot can help me prepare. It cannot care about the result for me.

Build a rhythm that is hard to avoid

Consistency matters more than occasional bursts of enthusiasm. One frantic afternoon of outreach does not repair three quiet weeks. A sales pipeline weakens gradually, then announces the problem suddenly.

I want lead generation built into the working day, not left for the spare hour that never arrives. I want sales reviewed every week, even when delivery is busy and especially when current revenue feels comfortable.

For an MSP, this could be as practical as selecting a handful of existing clients each week, reviewing their Microsoft 365 environment and starting a useful conversation about security, governance or Copilot readiness. The aim is not to manufacture fear or push a licence. It is to find a real business problem and help the client make a decision.

That is selling at its best: useful, specific and connected to an outcome.

Small businesses do not become substantial by performing the ceremony of scale. They grow by repeatedly doing the commercial work that creates scale.

My rule is simple. Every day should add possibility to the pipeline. Every week should test whether that possibility can become revenue.

If the numbers are not moving, I do not need another meeting. I need to return to the work that makes the business move.

Need to Know podcast–Episode 371

In this episode I cover the latest Microsoft news, including Office moving into the new Copilot app, the new Copilot with Home, Code and Autopilot, usage-based Copilot billing for partners starting 1 December (initially not available in Australia), new partner margin and a Business Premium security promotion, Entra ID blocking script injection at sign-in, Outlook blocking MSIX attachments, deepfake detection coming to Teams, an Exchange Server security update, the 2027 Windows Update certificate expiry and the Microsoft Digital Defense Report 2026.

In my editorial I look at agent autopilots like Grok Bot, Microsoft Autopilot (formerly Scout) and Meta Muse, and how I’m using a team of Grok Bot bots to post to social media, monitor my Microsoft 365 tenant with a read-only global admin reader, make phone calls and even produce the intro and news segment of this episode in a clone of my voice. Did you notice? Love your feedback.

Brought to you by www.ciaopspatron.com

you can listen directly to this episode at:

https://ciaops.podbean.com/e/episode-371/

Subscribe via iTunes at:

https://itunes.apple.com/au/podcast/ciaops-need-to-know-podcasts/id406891445?mt=2

or Spotify:

https://open.spotify.com/show/7ejj00cOuw8977GnnE2lPb

Don’t forget to give the show a rating as well as send me any feedback or suggestions you may have for the show

Resources

CIAOPS Need to Know podcast – CIAOPS – Need to Know podcasts | CIAOPS

X – https://www.twitter.com/directorcia

director@ciaops.com

CIAOPS Blog

Join my Teams Shared Channel – CIAOPS

CIAOPS Merch store – CIAOPS

Become a CIAOPS Patron

CIAOPS AI Dojo

CIAOPS weekly news update – CIA Brief – CIAOPS

CIAOPS Labs – The Special Activities Division of the CIAOPS

Support CIAOPS

Get your M365 questions answered via email

Join my email list

A special thanks to the CIAOPS Patron community for making this podcast possible. You can find the benefits of a subscription to the community and become a member at https://www.ciaopspatron.com

Updates

Copilot

Introducing Office in the new Microsoft Copilot app Microsoft is bringing Word, Excel and PowerPoint into the Copilot app so you can create, edit and collaborate on documents without leaving Chat or Cowork. It is rolling out to Frontier customers from 9 October, so think pilots rather than mass rollout. https://techcommunity.microsoft.com/blog/microsoft-copilot-blog/introducing-office-in-the-new-microsoft-copilot-app/4561230

Microsoft 365 Copilot release notes The latest release notes, covering 22 September to 6 October, show Copilot Search now embeds chat so users can search and then ask follow-up questions in the same place.https://learn.microsoft.com/en-us/microsoft-365/copilot/release-notes

Introducing the new Copilot with Home, Code and Autopilot Microsoft’s 25 September announcement of the new Copilot: Home brings Chat and Cowork together, Code lets people build small apps and automations in a sandbox hosted in your tenant, and Autopilot (previously Scout) is a persistent agent with its own identity, in private preview. Also covers the plugin registry, Copilot Managed Runtime and spend controls in Agent 365. https://blogs.microsoft.com/blog/2026/09/25/introducing-the-new-copilot-with-home-code-and-autopilot/

Money and partners

Partner Center announcements: October 2026 Usage-based billing becomes default-on for new Microsoft 365 Copilot Business licences bought through CSP from 1 December 2026, with a default cap of 4,000 Copilot Credits per user per month. It is initially not available in Australia. Also from 1 October, a 7.5% promotional pricing offer on Defender Suite and Purview Suite for Business Premium (customers under 300 seats) and new growth margin for Copilot, Microsoft 365 E5/E7, Defender Suite, Purview Suite and Windows 365 Enterprise. Link: https://learn.microsoft.com/en-us/partner-center/announcements/2026-october

Security and admin changes

Microsoft to block Entra ID script injection attacks starting in October Entra ID browser sign-in will enforce a Content Security Policy so only scripts from trusted Microsoft CDN domains run on the sign-in page. Rolling out mid to late October, on by default. Some browser extensions and helper tools that inject code may stop working, so test now. Link: https://www.bleepingcomputer.com/news/security/microsoft-to-block-entra-id-script-injection-attacks-starting-october/

Microsoft Outlook to block MSIX attachments used in attacks MSIX and MSIXBUNDLE attachments are being added to the blocked file types in OWA mailbox policies, starting early November. Admins can allow them via the AllowedFileTypes property if needed.  https://www.bleepingcomputer.com/news/microsoft/microsoft-outlook-to-block-msix-attachments-used-in-attacks/

Microsoft Teams to add third-party deepfake detection and impersonation protection New Microsoft 365 Roadmap entries show Teams integrating third-party deepfake detection signals and impersonation protection that warns about suspicious meeting organisers or participants, targeted for November. Roadmap dates can shift and third-party providers may mean extra cost. https://www.bleepingcomputer.com/news/security/microsoft-teams-to-add-third-party-deepfake-detection-impersonation-protection/

MSRC October 2026 security update release notes (CVE-2026-96940) On-premises Exchange Server security update released 5 October for CVE-2026-96940, CVSS 8.8, rated Exploitation More Likely, with no workarounds listed. Read the CVE page for impact details before briefing customers. https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct

Exchange Server SE security update KB5129955 The fix is in Exchange Server SE security update KB5129955 (SU10 V2). If you still run on-premises or hybrid Exchange, patch promptly.

https://support.microsoft.com/en-us/servicing/exchange/server/update/2026/5129955

Microsoft: Outdated Windows devices will lose security protection next year Certificates used to connect to Windows Update expire on 17 May 2027 and 19 June 2027. Devices on unsupported Windows versions will lose Windows Update services, so audit old PCs and servers now.

https://www.bleepingcomputer.com/news/microsoft/microsoft-outdated-windows-devices-will-lose-security-protection-next-year/

Threat landscape

Insights from the 2026 Microsoft Digital Defense Report Microsoft’s 2026 report says threat actors are using AI across reconnaissance, social engineering, malware development and post-compromise activity, mostly within existing attack workflows. The fundamentals still apply: identity, least privilege and monitoring. https://www.microsoft.com/en-us/security/blog/2026/10/01/insights-from-the-2026-microsoft-digital-defense-report/

Editorial: agent autopilots

Grok Bot overview The agent platform I use for my bots: persistent cloud computer per user, skills and routines. https://docs.x.ai/grok-bot/overview Introducing Muse, Meta’s personal AI agent Meta’s consumer personal agent announced in September 2026.  https://about.fb.com/news/2026/09/introducing-muse-personal-ai-agent/

https://ciaops.podbean.com/e/episode-371/

Give It Time to Become Something

image

Ten years ago, many of the tools I now rely on every day were either primitive, awkward or simply not part of my routine. The value did not arrive fully formed. It accumulated through practice, mistakes, better habits and steady improvement.

That is why I have become wary of judging any worthwhile change too quickly. We give a new idea a few weeks, perhaps a quarter, and then ask whether it has delivered. If the answer is not obvious, we move on. But some things only reveal their value after they have had enough time to compound.

The First Version Is Rarely the Real Story

I see this clearly with Microsoft 365 Copilot.

A business switches it on, runs a short training session and expects an instant productivity dividend. Staff try a few prompts in Word, ask Copilot to summarise an email thread in Outlook, and perhaps use it to recap a Teams meeting. Then someone asks the inevitable question: “Is this worth it?”

It is a reasonable question asked far too early.

The early benefit is rarely the polished document or the saved email. The deeper benefit is learning how to work differently. You start recognising which tasks deserve a first draft, which meetings need a sharper summary, which decisions are buried in conversation, and which processes exist only because nobody has challenged them.

That judgement takes time. So does trust. So does the discipline to check the output rather than accepting it blindly.

Compounding Happens Quietly

Most meaningful progress looks unimpressive at the beginning.

One better prompt does not change a business. One cleaned-up SharePoint library does not create strong information management. One useful Copilot-generated meeting recap does not fix poor communication. But repeat those improvements steadily and the organisation begins to behave differently.

I think about a small team finishing its weekly meeting in Teams. At first, Copilot simply helps capture decisions and actions. Over time, the team becomes more deliberate about naming owners, recording context and storing the supporting material where others can find it. The technology has not magically repaired the business. It has made better behaviour easier to repeat.

That is the part many organisations overlook. They chase a dramatic before-and-after moment when the real gain is a hundred small corrections made consistently.

A decade is not an excuse to drift. It is a reminder to choose a direction worth staying with.

Patience Still Needs Intent

Waiting alone achieves nothing. Time only compounds what you continue to practise.

If I were looking at a ten-year horizon for Copilot, I would not attempt to predict every feature or model. I would focus on durable capabilities: asking better questions, organising information, protecting sensitive data, reviewing AI output, documenting decisions and helping people adapt their work.

Those skills remain useful even as the interface changes.

I would also measure progress in sensible intervals. What became easier this month? Which recurring task now takes less effort? Where did Copilot expose a weak process rather than solve it? What information was missing when the answer fell short?

Those questions turn patience into management.

We routinely overestimate what a new tool should accomplish by Friday and underestimate what disciplined use can produce over years. The organisations that benefit most from Copilot will not necessarily be the ones that rushed hardest at the start. They will be the ones that kept learning after the novelty faded.

Some ideas need more than a trial. Some capabilities need more than a training session. Some changes need room to mature.

Give the work enough time to compound. Give yourself enough time to become good at it. Then look back and see how far the small decisions carried you.

CIA Brief 20261010

image

Events
  • Windows, Surface & NVIDIA Event Highlights: Everything Announced in 16 Minutes – A CNET video recap of the Windows, Surface and NVIDIA event in San Francisco. Highlights include Microsoft Execution Containers (MXC) moving from preview to GA on Windows 11 so agents run in policy-controlled sandboxes, a new taskbar search with thousands of quick actions, and the ability to build native Windows apps from a single prompt in Copilot. On the hardware side it covers the new Surface Laptop Ultra and Surface RTX Spark Dev Box (pre-order now), plus NVIDIA RTX Spark laptops from several makers and DGX Station running Windows.
    https://www.youtube.com/watch?v=K6QJp1edjmU

Security

After hours

THE WATCH: America’s Nuclear Mission | Official Teaser Trailer

– https://www.youtube.com/watch?v=Nu1cyEFpCbE

Editorial

If you found this valuable, the I’d appreciate a ‘like’ or perhaps a donation at https://ko-fi.com/ciaops. This helps me know that people enjoy what I have created and provides resources to allow me to create more content. If you have any feedback or suggestions around this, I’m all ears. You can also find me via email director@ciaops.com and on X (Twitter) at https://www.twitter.com/directorcia.

If you want to be part of a dedicated Microsoft Cloud community with information and interactions daily, then consider becoming a CIAOPS Patron – www.ciaopspatron.com.

Watch out for the next CIA Brief next week

GPT 6.1 Sol Copilot battle

If you have been following along you know that I have been comparing LLMs inside the different services in Copilot. Unsurprisingly, the most current and powerful models tend to be the winner, but what about the same LLM between different services?

Screenshot 2026-10-10 080747

Recently, GPT 6.1 Sol appeared in my Copilot Chat as you can see above. Thus, I put it head to head with GPT 6.1 Sol in Cowork and the results are here:

https://github.com/directorcia/general/blob/master/Copilot/Comparisons/20261009-GPT61-Grok-Eval.md

The news is that Copilot Chat won!

Now, I think the real take away here is no so much that Copilot Chat is ‘better’ than Cowork, it is that the same LLM in any Copilot service is equivalent. That leads to the following rule of thumb:

‘You DON’T need to use Cowork for everything! Copilot Chat is the best place to start’

For validation I repeated the test but with Opus 5.5 in Chat and Cowork here:

https://github.com/directorcia/general/blob/master/Copilot/Comparisons/20261009-Opus55-Grok-Eval.md

and again Chat came out on top. So, I am pretty confident that my rule of thumb above is valid.

The big different is that Cowork require PAYG billing. Thus, for these tests:

Cowork GPT Sol 6.1 = US$101

Cowork Claude Opus 5.5 = US$234

Not cheap at all! But if you use these same LLMs, in Copilot Chat instead you pay NO MORE than the flat monthly M365 Copilot license.

That’s the real message here I feel, start with the included services BEFORE moving to the paid option because from what I see they produce the same result.

Know What Can Move, and What Must Not

image

I have sat through many negotiations where the loudest issue in the room was not the most important one. Price gets attention. Deadlines create pressure. Scope produces red marks. Yet the decision that matters most is often quieter: what am I willing to change, and what am I unwilling to trade away?

I believe almost every commercial term can be discussed. Fees, timing, packaging, responsibilities and even the shape of the outcome can move. My principles cannot. Once I exchange those for convenience, I have not completed a clever negotiation. I have simply hidden the real cost.

Flexibility is not surrender

I do not see negotiation as a contest where one person wins and the other loses. I see it as a search for an arrangement both sides can live with. That requires flexibility.

A client may need a project delivered in stages because cash flow is tight. I can change the schedule. A supplier may need a longer commitment before offering a better rate. I can consider the term. An employee may want a different working pattern. I can discuss how the work gets done.

What I cannot do is promise an outcome I know is unlikely, hide a risk because it may slow the sale, or recommend a product simply because it pays me more. Those choices are not negotiating positions. They are tests of character.

The practical lesson is to identify the boundary before the pressure arrives. If I wait until the deal is nearly signed, I make it much easier to rationalise a poor decision. Urgency has a way of making compromise look harmless.

Let the tools expose the trade-offs

I find Microsoft 365 Copilot useful here because it can help me separate the movable terms from the fixed principles before a conversation begins.

For example, I can draft a proposal in Word, then ask Copilot to identify assumptions, obligations and areas where the language is ambiguous. I can review an email thread in Outlook and ask for the points of disagreement, without relying on my memory of who said what. After a Teams meeting, I can compare the recap with my notes and check whether the next steps still match the outcome I am prepared to stand behind.

I am not asking Copilot to decide my values. That responsibility remains mine. I am using it to make the trade-offs visible, especially when a long thread, rushed call or complicated document makes them hard to see.

That distinction matters. Technology can help me examine a decision. It should not become an excuse for avoiding one.

A good deal should survive daylight

One question keeps me grounded: would I be comfortable explaining this agreement plainly to someone whose judgement I respect?

If I need to omit details, soften the truth or describe the arrangement differently depending on the audience, I already have my answer. The problem is not the wording. The problem is the deal.

Walking away can feel expensive. I may lose revenue, momentum or an opportunity I wanted. But accepting work that conflicts with how I operate usually costs more. It creates difficult delivery conversations, weakens trust and leaves me spending energy defending a decision I should never have made.

I want to remain open-minded about the route, timing and commercial structure. I also want to be unmistakably clear about the standards underneath them.

That is how I think about negotiation now. I can be creative with the arrangement and generous in the conversation. I can listen, adapt and look for another path. But when the discussion reaches the principles that define how I work, the movement stops.

I’m Not Finished Yet

image

Some weeks seem determined to test every part of me.

A client issue appears just as I’m closing the laptop. A project I thought was nearly complete suddenly needs another round of work. An idea I believed in receives little interest. Then an update breaks something that worked perfectly yesterday.

None of these events is fatal. Together, however, they can feel relentless.

I’ve learned that resilience is not about pretending the hits do not hurt. It is about refusing to let them make the final decision.

Strength rarely looks impressive

I used to think being strong meant remaining confident, composed and certain. Experience has taught me otherwise.

Sometimes strength is opening the document again after the first draft failed. Sometimes it is returning a difficult phone call. Sometimes it is admitting that my original plan was wrong and building a better one.

The outside world usually sees the finished result. It does not see the abandoned drafts, awkward conversations, broken demonstrations or Saturday mornings spent solving a problem that should have been simple.

That is where most progress actually happens.

I do not need to feel fearless before I continue. I only need enough resolve to take the next useful step.

I can use friction rather than fight it

When something goes wrong, my first reaction is often frustration. I want the problem removed so I can return to the work I planned to do.

But friction contains information.

A stalled Copilot rollout may reveal that the organisation never agreed on what success should look like. A poor response from Copilot may expose messy SharePoint content or unclear instructions. A difficult client conversation may uncover an expectation nobody put into writing.

The setback is not always the enemy. Sometimes it is the most honest feedback available.

For example, after a disappointing meeting, I can ask Copilot in Teams to summarise the discussion and identify unresolved questions. I can then open Word and turn those questions into a clearer plan. That does not erase the difficult meeting, but it converts the experience into something I can act on.

I cannot control every blow. I can decide whether each one leaves me wiser.

Small recoveries build durable confidence

Confidence does not come from telling myself that everything will work. It comes from remembering that, when things did not work, I found another path.

That distinction matters.

A business owner does not develop confidence because every proposal succeeds. An MSP does not become dependable because every migration runs perfectly. I do not become capable because every Copilot demonstration produces the ideal response on the first attempt.

Confidence grows when I collect evidence that I can recover.

I diagnose the issue. I adjust the prompt. I check the permissions. I simplify the demonstration. I document what happened in OneNote or a Teams channel so the next attempt begins from a stronger position.

Each recovery may look small, but together they create something solid. I stop depending on perfect circumstances because I know how to respond when circumstances are anything but perfect.

My next move still belongs to me

Life and work will keep applying pressure. Technology will change. Plans will fail. People will disappoint me. I will occasionally disappoint myself.

None of that automatically decides where I finish.

I may need to pause. I may need help. I may need to replace the plan completely. Pausing is not surrender, and changing direction is not weakness.

The important question is simple: what useful move remains available to me?

As long as I can answer that question, I still have options. As long as I still have options, the contest is not over.

The Less You Chase, the More You Notice

image

I have noticed a strange pattern in work and life. The harder I chase attention, opportunity or approval, the further away it seems to move. Yet when I stop trying to force every outcome, useful things start appearing. A conversation becomes easier. An idea becomes clearer. Someone offers help without being prompted.

It can look like luck from the outside, but I think something more practical is happening. When I am no longer desperate for a particular result, I become far better at recognising what is already within reach.

Wanting can create noise

There is nothing wrong with ambition. I like goals, plans and measurable progress. The problem begins when wanting an outcome becomes the only lens through which I see the world.

I have sat at my desk on a Saturday morning, refreshing an inbox, rewriting a proposal and wondering why a prospect had not replied. Every action felt productive, but most of it was anxiety wearing a business shirt. I was not improving the proposal. I was trying to control another person’s decision.

That same behaviour now shows up with AI. People open Copilot and immediately demand the perfect answer, the perfect plan or the perfect document. They keep adjusting the prompt because they are attached to a very specific result. Often, the better move is to pause and ask a broader question: what am I missing?

That change matters. Instead of asking Copilot in Outlook to write the response I have already decided to send, I can ask it to summarise the thread, identify unresolved points and show me where my assumptions may be ahead of the evidence. I am no longer using the tool to validate my urgency. I am using it to widen my view.

Detachment improves judgement

When I do not need every opportunity to work, I can evaluate it properly. I can notice the client who is a poor fit, the meeting that does not need to happen, or the project that sounds exciting but pulls me away from more important work.

This is not indifference. It is selection.

I see the same thing in Teams meetings. If I enter determined to defend my idea, I hear objections as resistance. If I enter prepared to let the idea go, I can listen properly. Copilot’s meeting recap can then help me revisit the discussion without relying on the version I constructed in my head.

The technology is useful, but the real improvement comes from being willing to discover that I was wrong.

Neediness narrows choices. Perspective restores them.

Make room before adding more

Most people respond to uncertainty by adding activity. More emails. More meetings. More content. More tools. More prompts. The calendar fills, but the underlying question remains untouched.

I have found it more useful to remove something first. Cancel the unnecessary meeting. Close the extra browser tabs. Put the half-formed notes into OneNote or Loop and leave them alone for a day. Ask Copilot to group the open issues, not manufacture another page of tasks.

Space is not wasted capacity. It is where judgement returns.

The paradox is that once I stop demanding that every person, tool or opportunity deliver something to me, I become easier to work with and more capable of seeing value. I listen better. I choose more carefully. I stop confusing motion with progress.

I still want things. I still work hard. I simply try not to make any single outcome responsible for my peace of mind.

The moment I loosen my grip, the world does not suddenly owe me more. I just become available to see more of what it was offering all along.