Stop Borrowing the Playbook

image

I have spent enough time around business owners to recognise a familiar problem. They are not short of ideas. They are buried under them.

There is always another podcast, sales framework, funnel, script, course, growth hack or expert insisting that success depends on a tactic you have somehow missed. I have fallen into that trap myself. Collecting advice feels productive because it saves me from committing to one clear course of action.

But a business does not grow because I have accumulated the biggest library of clever ideas. It grows because I repeatedly do a few important things well.

Attention is not demand

The first job is to create genuine opportunities for conversation.

That does not mean spraying generic messages across LinkedIn or buying a list and hammering it with automated email. It means being visible to the right people, talking clearly about problems they already recognise, and giving them a reason to respond.

For an MSP, that might be a short Microsoft 365 security briefing for local businesses. It might be a practical post explaining why a high Secure Score does not automatically mean a tenant is secure. It might be a client referral process that is actually used rather than left inside a forgotten Word document.

I would rather have ten relevant conversations than ten thousand empty impressions. Reach can look impressive. Relevance creates work. I keep coming back to that whenever a new platform, campaign or shortcut promises scale before I have proved that the message deserves attention.

Trust is built before the proposal

Once someone notices me, my next job is not to rush them towards a quote. My job is to make the choice feel safe and sensible.

I do that by demonstrating how I think. I explain the problem plainly. I show what good looks like. I stay consistent in meetings, messages and follow-up. I do not hide behind jargon when a direct answer will do.

Microsoft 365 Copilot can help me maintain that consistency, but it cannot manufacture credibility. After a Teams meeting, I can use Copilot to pull together the agreed concerns, draft a useful follow-up in Outlook and turn the next actions into a clear plan. The technology removes friction. The quality of the thinking still belongs to me.

That distinction matters. People do not choose me because I possess a tool. They choose me because my use of that tool makes their next decision easier.

Make buying the natural next step

The final part is often where unnecessary complexity returns. The prospect is interested. The problem is understood. Trust exists. Then I bury the decision under a dense proposal, too many packages and a vague call to action.

I have learned that a good offer should connect directly to the conversation that came before it. The scope should be clear. The outcome should be understandable. The next step should require as little interpretation as possible.

If a client has concerns about Copilot readiness, I do not need to sell them an abstract transformation program. I can offer a focused assessment of permissions, data exposure, governance and practical use cases, then explain exactly what they receive and what decision it enables.

That is enough.

I still learn from other people. I still test new approaches. But I no longer confuse collecting tactics with building momentum.

My business needs a steady flow of the right conversations. It needs trust earned through useful work. It needs an offer that makes a decision easy.

Everything else has to justify the distraction.

The Tools Are Here. What Are You Doing With Them?

image

I keep coming back to a simple observation: it has never been easier to turn an idea into something useful.

A question that once required a consultant, a course, a developer and a spare month can now be explored before lunch. I can ask Copilot to help me understand a subject, challenge my assumptions, organise the result and produce a first working version. I can do it from the same Microsoft 365 environment where the email, meeting notes and documents already live.

That is an extraordinary change. Yet I still see people waiting for permission to begin.

Access is not the same as progress

Having powerful tools available does not mean I am using them well. A Copilot licence sitting beside Outlook and Teams creates potential, not value.

The difference appears when I bring it a real piece of work.

Suppose I finish a client meeting with scattered notes, unanswered questions and a follow-up due that afternoon. I can spend an hour reconstructing the conversation from memory. Or I can use Copilot in Teams to review the meeting, identify the decisions and help shape the next actions. I can then move into Outlook, draft a calm client update and revise it until it sounds like me.

The work still needs my judgement. The responsibility remains mine. But the distance between discussion and useful action becomes much shorter.

That is where the opportunity is. Not in admiring the tool, but in applying it to the messy work already on my desk.

Start with friction, not fascination

I think many people begin in the wrong place. They study every new capability and collect prompts, but never connect any of it to a recurring problem.

I prefer to look for friction. What do I postpone each week? Where do I repeatedly start from a blank page? Which task depends too heavily on information trapped in my inbox, a SharePoint library or somebody’s meeting notes?

Those questions create better starting points than asking what AI can do.

If I prepare a client report, I can use Copilot in Word to help build a first draft from material. If I need to understand a spreadsheet, I can ask Copilot in Excel to help me examine the patterns and then verify the conclusions myself. If a team keeps losing decisions, I can create a Loop workspace inside Teams and turn those decisions into visible actions.

None of these examples requires a grand transformation program. Each begins with one annoying job and a willingness to try a better method.

Creation has become a practical skill

The bigger shift is that I no longer need to be an expert in every discipline before I can make a useful start.

I can sketch a process, test an argument, draft a presentation, explore some code or map a service idea. I can ask questions as I go. I can discard weak attempts cheaply and improve the promising ones. Expertise still matters, especially when the outcome carries risk, but the entry price for experimentation has fallen.

That changes what I should expect from myself.

“I don’t know how” is no longer the end of the conversation. It is the opening prompt.

The constraint is less about access and more about my behaviour. Am I curious enough to test? Disciplined enough to verify? Patient enough to improve the first result? Willing to bring a real problem rather than a rehearsed demo?

The tools will keep improving. The more important question is whether my habits will improve with them.

I now have more ways to learn, create and solve than at any previous point in my working life. I do not need to use all of them. I do need to stop pretending I am waiting for the opportunity.

It is already open in the browser. The next move is mine.

Stop Acting Like the Business You Have Not Built Yet

image

I see small businesses copy the visible habits of large organisations all the time. They add layers of approval, build elaborate reporting packs, hold more meetings and spend weeks choosing systems. It looks professional. It feels mature. It also creates a dangerous illusion: activity starts to look like progress.

I have learned to ask a much less glamorous question. What happened this week that could produce revenue?

That question strips away a lot of theatre.

Revenue work comes before corporate work

A large company can afford roles, committees and processes because it already has customers, cash flow and momentum. Those things are the result of growth, not the starting conditions for it.

When I am working in a smaller business, I cannot borrow the operating model of an organisation with thousands of customers and expect it to create the first hundred. I need to concentrate on the work that creates conversations, proposals and signed agreements.

That does not mean ignoring service quality, security, finance or delivery. It means recognising the order of operations. Revenue keeps the lights on. Everything else depends on it.

I would rather see a simple sales habit followed every day than a beautiful strategy document opened once a quarter.

Put a number beside the work

Vague goals are comfortable because they are hard to fail. “Do more marketing” can mean almost anything. “Grow the business” sounds important but gives me nothing useful to do at 9.00 on Tuesday morning.

I prefer measures that create a daily behaviour and a weekly outcome.

How many worthwhile prospects did I identify today? How many genuine conversations did I start? How many opportunities moved to a clear next step? What did I actually close this week?

The exact target will vary. The discipline should not.

I can make this visible with tools I already use. I might keep a small pipeline in Microsoft Lists or Excel, add the next action and owner, then review it in Teams. Before the weekly sales check-in, I can ask Copilot to summarise the relevant Outlook threads and identify where a prospect is waiting for a response. That removes administration from the process without pretending administration is selling.

Copilot can help me prepare. It cannot care about the result for me.

Build a rhythm that is hard to avoid

Consistency matters more than occasional bursts of enthusiasm. One frantic afternoon of outreach does not repair three quiet weeks. A sales pipeline weakens gradually, then announces the problem suddenly.

I want lead generation built into the working day, not left for the spare hour that never arrives. I want sales reviewed every week, even when delivery is busy and especially when current revenue feels comfortable.

For an MSP, this could be as practical as selecting a handful of existing clients each week, reviewing their Microsoft 365 environment and starting a useful conversation about security, governance or Copilot readiness. The aim is not to manufacture fear or push a licence. It is to find a real business problem and help the client make a decision.

That is selling at its best: useful, specific and connected to an outcome.

Small businesses do not become substantial by performing the ceremony of scale. They grow by repeatedly doing the commercial work that creates scale.

My rule is simple. Every day should add possibility to the pipeline. Every week should test whether that possibility can become revenue.

If the numbers are not moving, I do not need another meeting. I need to return to the work that makes the business move.

Need to Know podcast–Episode 371

In this episode I cover the latest Microsoft news, including Office moving into the new Copilot app, the new Copilot with Home, Code and Autopilot, usage-based Copilot billing for partners starting 1 December (initially not available in Australia), new partner margin and a Business Premium security promotion, Entra ID blocking script injection at sign-in, Outlook blocking MSIX attachments, deepfake detection coming to Teams, an Exchange Server security update, the 2027 Windows Update certificate expiry and the Microsoft Digital Defense Report 2026.

In my editorial I look at agent autopilots like Grok Bot, Microsoft Autopilot (formerly Scout) and Meta Muse, and how I’m using a team of Grok Bot bots to post to social media, monitor my Microsoft 365 tenant with a read-only global admin reader, make phone calls and even produce the intro and news segment of this episode in a clone of my voice. Did you notice? Love your feedback.

Brought to you by www.ciaopspatron.com

you can listen directly to this episode at:

https://ciaops.podbean.com/e/episode-371/

Subscribe via iTunes at:

https://itunes.apple.com/au/podcast/ciaops-need-to-know-podcasts/id406891445?mt=2

or Spotify:

https://open.spotify.com/show/7ejj00cOuw8977GnnE2lPb

Don’t forget to give the show a rating as well as send me any feedback or suggestions you may have for the show

Resources

CIAOPS Need to Know podcast – CIAOPS – Need to Know podcasts | CIAOPS

X – https://www.twitter.com/directorcia

director@ciaops.com

CIAOPS Blog

Join my Teams Shared Channel – CIAOPS

CIAOPS Merch store – CIAOPS

Become a CIAOPS Patron

CIAOPS AI Dojo

CIAOPS weekly news update – CIA Brief – CIAOPS

CIAOPS Labs – The Special Activities Division of the CIAOPS

Support CIAOPS

Get your M365 questions answered via email

Join my email list

A special thanks to the CIAOPS Patron community for making this podcast possible. You can find the benefits of a subscription to the community and become a member at https://www.ciaopspatron.com

Updates

Copilot

Introducing Office in the new Microsoft Copilot app Microsoft is bringing Word, Excel and PowerPoint into the Copilot app so you can create, edit and collaborate on documents without leaving Chat or Cowork. It is rolling out to Frontier customers from 9 October, so think pilots rather than mass rollout. https://techcommunity.microsoft.com/blog/microsoft-copilot-blog/introducing-office-in-the-new-microsoft-copilot-app/4561230

Microsoft 365 Copilot release notes The latest release notes, covering 22 September to 6 October, show Copilot Search now embeds chat so users can search and then ask follow-up questions in the same place.https://learn.microsoft.com/en-us/microsoft-365/copilot/release-notes

Introducing the new Copilot with Home, Code and Autopilot Microsoft’s 25 September announcement of the new Copilot: Home brings Chat and Cowork together, Code lets people build small apps and automations in a sandbox hosted in your tenant, and Autopilot (previously Scout) is a persistent agent with its own identity, in private preview. Also covers the plugin registry, Copilot Managed Runtime and spend controls in Agent 365. https://blogs.microsoft.com/blog/2026/09/25/introducing-the-new-copilot-with-home-code-and-autopilot/

Money and partners

Partner Center announcements: October 2026 Usage-based billing becomes default-on for new Microsoft 365 Copilot Business licences bought through CSP from 1 December 2026, with a default cap of 4,000 Copilot Credits per user per month. It is initially not available in Australia. Also from 1 October, a 7.5% promotional pricing offer on Defender Suite and Purview Suite for Business Premium (customers under 300 seats) and new growth margin for Copilot, Microsoft 365 E5/E7, Defender Suite, Purview Suite and Windows 365 Enterprise. Link: https://learn.microsoft.com/en-us/partner-center/announcements/2026-october

Security and admin changes

Microsoft to block Entra ID script injection attacks starting in October Entra ID browser sign-in will enforce a Content Security Policy so only scripts from trusted Microsoft CDN domains run on the sign-in page. Rolling out mid to late October, on by default. Some browser extensions and helper tools that inject code may stop working, so test now. Link: https://www.bleepingcomputer.com/news/security/microsoft-to-block-entra-id-script-injection-attacks-starting-october/

Microsoft Outlook to block MSIX attachments used in attacks MSIX and MSIXBUNDLE attachments are being added to the blocked file types in OWA mailbox policies, starting early November. Admins can allow them via the AllowedFileTypes property if needed.  https://www.bleepingcomputer.com/news/microsoft/microsoft-outlook-to-block-msix-attachments-used-in-attacks/

Microsoft Teams to add third-party deepfake detection and impersonation protection New Microsoft 365 Roadmap entries show Teams integrating third-party deepfake detection signals and impersonation protection that warns about suspicious meeting organisers or participants, targeted for November. Roadmap dates can shift and third-party providers may mean extra cost. https://www.bleepingcomputer.com/news/security/microsoft-teams-to-add-third-party-deepfake-detection-impersonation-protection/

MSRC October 2026 security update release notes (CVE-2026-96940) On-premises Exchange Server security update released 5 October for CVE-2026-96940, CVSS 8.8, rated Exploitation More Likely, with no workarounds listed. Read the CVE page for impact details before briefing customers. https://msrc.microsoft.com/update-guide/releaseNote/2026-Oct

Exchange Server SE security update KB5129955 The fix is in Exchange Server SE security update KB5129955 (SU10 V2). If you still run on-premises or hybrid Exchange, patch promptly.

https://support.microsoft.com/en-us/servicing/exchange/server/update/2026/5129955

Microsoft: Outdated Windows devices will lose security protection next year Certificates used to connect to Windows Update expire on 17 May 2027 and 19 June 2027. Devices on unsupported Windows versions will lose Windows Update services, so audit old PCs and servers now.

https://www.bleepingcomputer.com/news/microsoft/microsoft-outdated-windows-devices-will-lose-security-protection-next-year/

Threat landscape

Insights from the 2026 Microsoft Digital Defense Report Microsoft’s 2026 report says threat actors are using AI across reconnaissance, social engineering, malware development and post-compromise activity, mostly within existing attack workflows. The fundamentals still apply: identity, least privilege and monitoring. https://www.microsoft.com/en-us/security/blog/2026/10/01/insights-from-the-2026-microsoft-digital-defense-report/

Editorial: agent autopilots

Grok Bot overview The agent platform I use for my bots: persistent cloud computer per user, skills and routines. https://docs.x.ai/grok-bot/overview Introducing Muse, Meta’s personal AI agent Meta’s consumer personal agent announced in September 2026.  https://about.fb.com/news/2026/09/introducing-muse-personal-ai-agent/

https://ciaops.podbean.com/e/episode-371/

Give It Time to Become Something

image

Ten years ago, many of the tools I now rely on every day were either primitive, awkward or simply not part of my routine. The value did not arrive fully formed. It accumulated through practice, mistakes, better habits and steady improvement.

That is why I have become wary of judging any worthwhile change too quickly. We give a new idea a few weeks, perhaps a quarter, and then ask whether it has delivered. If the answer is not obvious, we move on. But some things only reveal their value after they have had enough time to compound.

The First Version Is Rarely the Real Story

I see this clearly with Microsoft 365 Copilot.

A business switches it on, runs a short training session and expects an instant productivity dividend. Staff try a few prompts in Word, ask Copilot to summarise an email thread in Outlook, and perhaps use it to recap a Teams meeting. Then someone asks the inevitable question: “Is this worth it?”

It is a reasonable question asked far too early.

The early benefit is rarely the polished document or the saved email. The deeper benefit is learning how to work differently. You start recognising which tasks deserve a first draft, which meetings need a sharper summary, which decisions are buried in conversation, and which processes exist only because nobody has challenged them.

That judgement takes time. So does trust. So does the discipline to check the output rather than accepting it blindly.

Compounding Happens Quietly

Most meaningful progress looks unimpressive at the beginning.

One better prompt does not change a business. One cleaned-up SharePoint library does not create strong information management. One useful Copilot-generated meeting recap does not fix poor communication. But repeat those improvements steadily and the organisation begins to behave differently.

I think about a small team finishing its weekly meeting in Teams. At first, Copilot simply helps capture decisions and actions. Over time, the team becomes more deliberate about naming owners, recording context and storing the supporting material where others can find it. The technology has not magically repaired the business. It has made better behaviour easier to repeat.

That is the part many organisations overlook. They chase a dramatic before-and-after moment when the real gain is a hundred small corrections made consistently.

A decade is not an excuse to drift. It is a reminder to choose a direction worth staying with.

Patience Still Needs Intent

Waiting alone achieves nothing. Time only compounds what you continue to practise.

If I were looking at a ten-year horizon for Copilot, I would not attempt to predict every feature or model. I would focus on durable capabilities: asking better questions, organising information, protecting sensitive data, reviewing AI output, documenting decisions and helping people adapt their work.

Those skills remain useful even as the interface changes.

I would also measure progress in sensible intervals. What became easier this month? Which recurring task now takes less effort? Where did Copilot expose a weak process rather than solve it? What information was missing when the answer fell short?

Those questions turn patience into management.

We routinely overestimate what a new tool should accomplish by Friday and underestimate what disciplined use can produce over years. The organisations that benefit most from Copilot will not necessarily be the ones that rushed hardest at the start. They will be the ones that kept learning after the novelty faded.

Some ideas need more than a trial. Some capabilities need more than a training session. Some changes need room to mature.

Give the work enough time to compound. Give yourself enough time to become good at it. Then look back and see how far the small decisions carried you.

CIA Brief 20261010

image

Events
  • Windows, Surface & NVIDIA Event Highlights: Everything Announced in 16 Minutes – A CNET video recap of the Windows, Surface and NVIDIA event in San Francisco. Highlights include Microsoft Execution Containers (MXC) moving from preview to GA on Windows 11 so agents run in policy-controlled sandboxes, a new taskbar search with thousands of quick actions, and the ability to build native Windows apps from a single prompt in Copilot. On the hardware side it covers the new Surface Laptop Ultra and Surface RTX Spark Dev Box (pre-order now), plus NVIDIA RTX Spark laptops from several makers and DGX Station running Windows.
    https://www.youtube.com/watch?v=K6QJp1edjmU

Security

After hours

THE WATCH: America’s Nuclear Mission | Official Teaser Trailer

– https://www.youtube.com/watch?v=Nu1cyEFpCbE

Editorial

If you found this valuable, the I’d appreciate a ‘like’ or perhaps a donation at https://ko-fi.com/ciaops. This helps me know that people enjoy what I have created and provides resources to allow me to create more content. If you have any feedback or suggestions around this, I’m all ears. You can also find me via email director@ciaops.com and on X (Twitter) at https://www.twitter.com/directorcia.

If you want to be part of a dedicated Microsoft Cloud community with information and interactions daily, then consider becoming a CIAOPS Patron – www.ciaopspatron.com.

Watch out for the next CIA Brief next week

GPT 6.1 Sol Copilot battle

If you have been following along you know that I have been comparing LLMs inside the different services in Copilot. Unsurprisingly, the most current and powerful models tend to be the winner, but what about the same LLM between different services?

Screenshot 2026-10-10 080747

Recently, GPT 6.1 Sol appeared in my Copilot Chat as you can see above. Thus, I put it head to head with GPT 6.1 Sol in Cowork and the results are here:

https://github.com/directorcia/general/blob/master/Copilot/Comparisons/20261009-GPT61-Grok-Eval.md

The news is that Copilot Chat won!

Now, I think the real take away here is no so much that Copilot Chat is ‘better’ than Cowork, it is that the same LLM in any Copilot service is equivalent. That leads to the following rule of thumb:

‘You DON’T need to use Cowork for everything! Copilot Chat is the best place to start’

For validation I repeated the test but with Opus 5.5 in Chat and Cowork here:

https://github.com/directorcia/general/blob/master/Copilot/Comparisons/20261009-Opus55-Grok-Eval.md

and again Chat came out on top. So, I am pretty confident that my rule of thumb above is valid.

The big different is that Cowork require PAYG billing. Thus, for these tests:

Cowork GPT Sol 6.1 = US$101

Cowork Claude Opus 5.5 = US$234

Not cheap at all! But if you use these same LLMs, in Copilot Chat instead you pay NO MORE than the flat monthly M365 Copilot license.

That’s the real message here I feel, start with the included services BEFORE moving to the paid option because from what I see they produce the same result.

Know What Can Move, and What Must Not

image

I have sat through many negotiations where the loudest issue in the room was not the most important one. Price gets attention. Deadlines create pressure. Scope produces red marks. Yet the decision that matters most is often quieter: what am I willing to change, and what am I unwilling to trade away?

I believe almost every commercial term can be discussed. Fees, timing, packaging, responsibilities and even the shape of the outcome can move. My principles cannot. Once I exchange those for convenience, I have not completed a clever negotiation. I have simply hidden the real cost.

Flexibility is not surrender

I do not see negotiation as a contest where one person wins and the other loses. I see it as a search for an arrangement both sides can live with. That requires flexibility.

A client may need a project delivered in stages because cash flow is tight. I can change the schedule. A supplier may need a longer commitment before offering a better rate. I can consider the term. An employee may want a different working pattern. I can discuss how the work gets done.

What I cannot do is promise an outcome I know is unlikely, hide a risk because it may slow the sale, or recommend a product simply because it pays me more. Those choices are not negotiating positions. They are tests of character.

The practical lesson is to identify the boundary before the pressure arrives. If I wait until the deal is nearly signed, I make it much easier to rationalise a poor decision. Urgency has a way of making compromise look harmless.

Let the tools expose the trade-offs

I find Microsoft 365 Copilot useful here because it can help me separate the movable terms from the fixed principles before a conversation begins.

For example, I can draft a proposal in Word, then ask Copilot to identify assumptions, obligations and areas where the language is ambiguous. I can review an email thread in Outlook and ask for the points of disagreement, without relying on my memory of who said what. After a Teams meeting, I can compare the recap with my notes and check whether the next steps still match the outcome I am prepared to stand behind.

I am not asking Copilot to decide my values. That responsibility remains mine. I am using it to make the trade-offs visible, especially when a long thread, rushed call or complicated document makes them hard to see.

That distinction matters. Technology can help me examine a decision. It should not become an excuse for avoiding one.

A good deal should survive daylight

One question keeps me grounded: would I be comfortable explaining this agreement plainly to someone whose judgement I respect?

If I need to omit details, soften the truth or describe the arrangement differently depending on the audience, I already have my answer. The problem is not the wording. The problem is the deal.

Walking away can feel expensive. I may lose revenue, momentum or an opportunity I wanted. But accepting work that conflicts with how I operate usually costs more. It creates difficult delivery conversations, weakens trust and leaves me spending energy defending a decision I should never have made.

I want to remain open-minded about the route, timing and commercial structure. I also want to be unmistakably clear about the standards underneath them.

That is how I think about negotiation now. I can be creative with the arrangement and generous in the conversation. I can listen, adapt and look for another path. But when the discussion reaches the principles that define how I work, the movement stops.