Insights on InnovateX Solutions

Does Your Business Need a Fractional Chief AI Officer?

Mon, 19 Oct 2026 08:00:00 +1000

AI-created illustration of Todd Johnson in an executive planning setting. This is not a photograph of a client engagement.

If your leadership team agreed tomorrow that AI should improve a major business process, who would be accountable for making it happen?

Brisbane 2032: getting your business ready to supply and deliver

Thu, 15 Oct 2026 13:00:00 +1000

Todd Johnson · 15 October 2026 · Brisbane North Chamber of Commerce

If a larger contract came through tomorrow, could your team prepare the submission and then deliver the work? That was the question I came away with from the Lord Mayor’s breakfast. Brisbane 2032 gives businesses a reason to look at both.

My Fortuna One 2026 notes on AI and business

Thu, 24 Sep 2026 07:00:00 +1000

At Fortuna One, AI kept turning up outside the sessions that had AI in the title, including discussions about acquisitions, customer communities, faster experimentation and getting the founder out of every decision. I heard a lot about new revenue, smaller teams and faster execution, and much less about the data, permissions, approvals and exception handling required once the demo is connected to a live business.

Day in the Life: Daniel, Council Planner

Thu, 06 Aug 2026 08:00:00 +1000

Four hundred submissions came in on the development plan, and the volume is the threat to a good decision.

Daniel is a planner at a local council. A contentious application means a flood of community feedback that has to be read, understood, and answered for the public record. Read by hand under a deadline, the genuine concerns drown in the duplicates, and the decision risks being shaped by whoever shouted loudest rather than by what the submissions said.

Day in the Life: Aroha, Not-for-Profit Operations Lead

Thu, 30 Jul 2026 08:00:00 +1000

A community not-for-profit runs on too few people and too much need, and the gap is usually filled with someone’s evenings.

Aroha runs operations, which on a team this size means she runs most things. The grant that keeps the lights on, the donors who fund it, the volunteers who deliver it. The work does not shrink to fit the headcount, so it gets done late, by the same few people, until one of them burns out and the gap grows wider.

Day in the Life: Tom, Café Owner

Thu, 23 Jul 2026 08:00:00 +1000

A café with a team of two has no back office, which means the back office is Tom, after close.

He owns the place and one of the two is on the coffee, so any job that is not making or serving lands on him. Ordering, rostering, the socials, the supplier chase. It is the work that keeps a small shop small, because the owner becomes the bottleneck, and a bottleneck cannot grow.

An AI decided to hack a company. Nobody told it to.

Tue, 21 Jul 2026 22:00:00 +1000

Updated 27 July 2026. This piece first ran on 21 July as the story broke. OpenAI has since confirmed its own models were behind it, and I’ve rewritten it to say what I actually think now the full picture is out.

The Privacy Act just expanded. Does it cover your business now?

Mon, 20 Jul 2026 06:00:00 +1000

A small conveyancing firm that was fully exempt from the Privacy Act on 30 June woke up on 1 July with new obligations attached to its client files, and almost certainly hasn’t been told. On 1 July 2026 the Act reached tens of thousands of firms like it. The change did not arrive as a privacy reform at all. It came in through the anti-money-laundering laws, and it works by switching off the exemption that has kept small businesses out of the Privacy Act for a generation. If you run a law practice, an accounting firm, a conveyancer or a real estate agency, there is a good chance you are now in scope for the first time.

Day in the Life: Hana, Deputy Principal

Thu, 16 Jul 2026 08:00:00 +1000

Report season used to decide how much of October Hana spent away from the classrooms.

She is deputy principal at a primary school, and the maths of term four is brutal. The admin load spikes at the exact moment the students need the adults most, and the hours come from somewhere. The thing a school can least afford to lose is teacher attention, and that is the first thing the paperwork takes.

What is ISO 42001, why it matters, and does it apply to me?

Mon, 13 Jul 2026 06:00:00 +1000

ISO 42001 is the first international standard you can hold a certificate against for governing artificial intelligence. Every other AI framework to date has been guidance, principles, or a maturity model you grade yourself against. This is the first one an accredited auditor can assess you to and issue a certificate for, the same way ISO 27001 works for information security. Which is why your enterprise customers are about to start asking whether you have it.

Day in the Life: Sam, Logistics Operations Manager

Thu, 09 Jul 2026 08:00:00 +1000

The busiest day of the quarter is the day the old way of planning used to break.

Sam manages operations for a regional distribution centre, and the problem was not the quiet days. It was that demand, routing, and a thousand small decisions all peaked at once, by hand, on the day a mistake cost the most. A late truck before a long weekend is not one late truck. It is a chain of missed drops, overtime, and customers who remember.

What is ISO 27001, why it matters, and does it apply to me?

Mon, 06 Jul 2026 06:00:00 +1000

ISO 27001 is the international standard for running information security as a system rather than a pile of tools. It is the credential a tender means when it asks “are you certified?”, and for a growing number of Australian businesses it has quietly shifted from a nice-to-have to the price of being allowed to bid. If a large customer or a government panel is in your future, this is the standard that decides whether you are in the room.

Day in the Life: Eleanor, Law-Firm Partner

Thu, 02 Jul 2026 08:00:00 +1000

Eleanor opens the contract and the first pass is already marked up, which matters because the slow part of her job is the part that does not scale.

The draft came in late from the other side. A partner’s evening is the most expensive way to read it, and careful review is the one place she cannot take a shortcut, however tempting one looks at 9pm. Her constraint is not skill. It is hours, and there are only so many senior ones to go round.

What the ASD is telling Australian businesses about AI in 2026

Mon, 29 Jun 2026 06:00:00 +1000

The Australian Signals Directorate spent the first half of 2026 publishing a steady stream of AI guidance, and the message is blunt. Improve your security fundamentals now, because attackers are already using AI to move faster than you are. If you run a business and you have switched on AI faster than you have governed it, the national cyber authority has effectively written your reading list.

Day in the Life: Marcus, Hospital Ward Clerk

Thu, 25 Jun 2026 08:00:00 +1000

On a hospital ward, the admin is what stands between the staff and the patients.

Marcus runs that admin, and the morning used to start in a backlog. Seven o’clock meant reading through a whole night of scattered notes to piece together what the day shift needed to know, while the buzzers were already going. The cost of a slow or missed handover is not an inconvenience. It is the wrong information following the wrong patient.

ASD is retiring the Essential Eight, not your security investment

Thu, 25 Jun 2026 06:00:00 +1000

The Australian Signals Directorate is retiring the Essential Eight, the cyber security framework Australian organisations have spent the better part of a decade aligning to. If you read the headline and felt your stomach drop, read the next line slowly. This is not an emergency, and your compliance work did not just expire.

Should you hire a CIO or CTO to lead your IT MSP?

Mon, 22 Jun 2026 08:00:00 +1000

There’s a model that makes a lot of sense on paper. Keep your MSP doing operational IT. Hire a senior IT leader (a CTO or CIO) to sit above them. Give that person the strategy, the roadmap, the vendor management, the governance. The MSP executes. The IT leader directs.

Day in the Life: Priya, Sole-Trader Electrician

Thu, 18 Jun 2026 08:00:00 +1000

Priya’s first job is booked before she finishes her coffee, and it is the kind of job she used to lose.

For a sole trader, the admin is an unpaid second job. Quoting, booking, chasing invoices, filling out certificates. It is the work that piles up after dark, and it sets how many paying jobs she can take on. When a customer messages at 6.40 about a safety switch that keeps tripping, the morning comes down to one thing. She answers fast, or she loses them to the next sparkie who does.

Fractional IT leadership and managed services are not competing products

Mon, 15 Jun 2026 08:00:00 +1000

If your MSP is doing everything right and something still feels broken, the problem probably isn’t your MSP.

Managed services and fractional IT leadership solve different problems. Conflating them leads to the wrong decision, and businesses make this mistake consistently.

Measuring Claude Enterprise Adoption at 30, 60, 90 Days

Tue, 09 Jun 2026 10:00:00 +1000

Six months in, most Claude Enterprise rollouts reach the same conversation. The CFO or the procurement lead asks whether the licences are paying back, and the rollout team has anecdotes but not a defensible answer. The 30-60-90 scorecard prevents that conversation by establishing what good adoption looks like at three concrete checkpoints, before licence one is activated.

Meta's AI gave away 20,000 Instagram accounts. Every login was authorised.

Tue, 09 Jun 2026 08:00:00 +1000

Nobody picked a lock. The attackers opened a support chat and asked Meta’s AI to hand over the account, and it did. That’s the whole problem, and it’s why AI agent governance is now a board-level question, not an IT one.

Signs your business has outgrown its IT leadership

Mon, 08 Jun 2026 08:00:00 +1000

Your IT structure solved a problem you no longer have. The team grew, the systems multiplied, and the leadership model that was fine at 30 people quietly became a constraint at 120. Nothing failed spectacularly. Things just got harder than they should be.

Claude Enterprise on Google Workspace: A 90-Day Rollout Plan

Tue, 02 Jun 2026 10:00:00 +1000

A 90-day Claude Enterprise rollout inside Google Workspace runs the same shape as the M365 version, with platform-native differences. Identity comes through Google SSO and SAML federation instead of Entra ID. Pilot context patterns bridge Drive and Gmail instead of SharePoint and Outlook. Coexistence rules sit alongside Gemini for Workspace rather than Copilot. The 90 days lands a rollout that the security team has signed and the user community has adopted, not a deployment-on-paper.

Claude Enterprise on Microsoft 365: A 90-Day Rollout Plan

Tue, 02 Jun 2026 10:00:00 +1000

A 90-day Claude Enterprise rollout inside Microsoft 365 is the realistic timeline. Faster than 90 days skips the policy work or the identity work and produces an incident later. Slower than 90 days is consulting drag, not implementation discipline. The phases are identity in the first fortnight, pilot with M365 context patterns in the second month, Copilot coexistence rules in the third, and broad rollout in the closing weeks.

Claude Enterprise Governance: Policies to Write Before Rollout

Tue, 26 May 2026 10:00:00 +1000

Most Claude Enterprise rollouts ship before the policy work is done, and then the rollout team spends the next three months retro-fitting policies onto behaviour that has already set in. The order can be reversed at almost no extra cost if the work is done before licence one is activated. The four policies every Australian organisation needs in writing before activating Claude Enterprise: acceptable use, data classification overlap, human-in-the-loop boundaries, and incident handling.

Claude Enterprise Security and Data Residency in 2026

Tue, 26 May 2026 10:00:00 +1000

The first question a CISO asks about Claude Enterprise is not whether it works. It is whether putting it on the network breaks anything that has already been certified. Claude Enterprise’s posture is built to slot in next to controls Australian organisations already run. The slotting-in still has to be done deliberately, with the no-training guarantee, identity controls, and audit logging mapped to the framework you sit under.

Fractional Chief AI Officer: what it is, when SMBs need one, and where it fits next to your CIO

Fri, 22 May 2026 00:00:00 +0000

Part of: Fractional Leadership

A new role keeps showing up on the agenda of Australian SMB and mid-market boards. Whether to call it a Chief AI Officer, a Head of AI, a vCAIO, or simply “the person who owns the AI question” varies by business. The shape of the work does not.

Claude Enterprise vs Copilot vs Gemini: A 2026 Buyer's Guide

Thu, 21 May 2026 10:00:00 +1000

When IT leaders ask us about Claude Enterprise, the question is almost never “is it smarter than Copilot or Gemini”. The question is whether to replace the workspace assistant they already pay for, run Claude alongside it, or budget for both.

APRA just told boards their AI literacy isn't good enough

Tue, 19 May 2026 00:00:00 +0000

APRA’s 30 April 2026 letter to industry on AI doesn’t read like guidance. It reads like a warning shot. Every regulator on the planet is worried about AI. The novelty here is the addressee. The letter is written to boards, and it says, in regulator-polite language, that boards aren’t keeping up.

Start With the Core: Why Governance Is the First Thing You Implement (Not the Last)

Fri, 27 Feb 2026 00:00:00 +0000

There’s a sequence that most architecture teams follow when they’re building a practice. They hire some architects, pick a framework, start producing artefacts, get some delivery wins under their belt, establish credibility, and then, eventually, put governance around the whole thing.

Is Your Microsoft 365 Tenant Ready for AI? A Pre-Copilot Checklist

Tue, 24 Feb 2026 00:00:00 +0000

Microsoft 365 Copilot is only as good as the tenant it sits on top of. If your security’s loose, your data’s unclassified, and your permissions are a mess, Copilot won’t fix that. It’ll amplify it. Before you spend a cent on licences, here’s what to get right first.

What Is XAF Connected Architecture? A Practical Alternative to Framework Overload

Thu, 19 Feb 2026 00:00:00 +0000

You’ve adopted a framework. Probably more than one.

Maybe TOGAF gave you the development methodology. Zachman provided the taxonomy. SABSA shaped your security architecture. BIZBOK guided your capability modelling. SAFe tried to embed architecture into agile delivery.

Who Can Access What? Getting Microsoft 365 Permissions Right

Tue, 17 Feb 2026 00:00:00 +0000

Most businesses running Microsoft 365 have a permissions problem they don’t know about. Files shared with “Everyone in the organisation,” old project sites still accessible to staff who left years ago, and OneDrive folders shared externally with no expiry date. It’s not malicious. It’s just what happens when sharing is easy and nobody’s reviewing who has access to what.

Your Architecture Domains Are Busy. They're Just Not Connected.

Thu, 12 Feb 2026 00:00:00 +0000

You’ve probably been here before.

Your organisation has architects. Maybe even good ones. Business architects are mapping capabilities. Data architects are defining governance models. Security architects are reviewing designs. Technology architects are setting standards and reference architectures.

How to Classify and Protect Your Business Data in Microsoft 365

Tue, 10 Feb 2026 00:00:00 +0000

If you’re running Microsoft 365 and haven’t set up data classification yet, every document in your tenant is treated the same, whether it’s a staff lunch menu or a client’s financial records. Sensitivity labels in Microsoft Purview let you fix that by categorising your data and applying protection that travels with the document, no matter where it ends up.

Is Your Microsoft 365 Tenant Actually Secure? Here's How to Check

Thu, 05 Feb 2026 00:00:00 +0000

InnovateX Solutions helps Brisbane businesses find out what’s actually going on inside their Microsoft 365 tenants, before someone else does. Most organisations on Microsoft 365 Business Standard are running with default settings that leave significant security gaps. Here’s what to ask your IT provider about, and what “good” actually looks like when measured against Australian and international security standards.

Introducing XAF Connected Architecture: A Practical Framework for Architecture That Actually Ships

Thu, 22 Jan 2026 00:00:00 +0000

Every organisation we work with faces the same problem: enterprise architecture that looks great on paper but doesn’t actually work in practice.

Business architects build capability models that technology teams never see. Security architects define frameworks that nobody else was consulted on. Solution architects make decisions in isolation, then everyone wonders why integration takes twice as long as planned. Each domain optimises locally while the organisation suffers globally.

SMB1001 Certification: Your Business's Security Roadmap from Startup to Enterprise

Tue, 13 Jan 2026 00:00:00 +0000

What is SMB1001 certification? SMB1001 is the industry’s recognised framework for managed service provider cyber security, offering five progressive certification tiers (Bronze through Diamond) that scale with your business growth, ultimately leading to ISO27001 compliance. For Brisbane businesses serious about security, it’s the difference between reactive firefighting and proactive protection.

Tips to keep kids safe online that actually work

Thu, 20 Nov 2025 00:00:00 +0000

Keeping kids safe online feels overwhelming. Between TikTok, Roblox, Snapchat, Fortnite, and whatever new app launches next week, it’s hard to keep up. As a parent in Brisbane (or anywhere in Australia), you’re not just competing with screen time. You’re up against algorithms designed to keep kids scrolling, gaming chats full of strangers, and scams targeting children who don’t know better.

InnovateX Solutions joins the Local Buy ICT panel for local government and councils

Tue, 04 Nov 2025 00:00:00 +0000

We’re thrilled to announce that InnovateX Solutions has been successfully added to the Local Buy procurement panel LB308 for ICT Solutions, Products, Services & New Tech.

This significant milestone opens new doors for local governments and councils across the region to access our expertise in three critical service categories: Consultancy/ICT Professional Services, Cyber Security, and Managed Services.

InnovateX Solutions Gold Cyber Certified

Tue, 21 Oct 2025 00:00:00 +0000

Expanding Our Capabilities to Better Serve Your Business

InnovateX Solutions has achieved SMB1001 Gold Certification, a significant step that lets us deliver more for our clients.

Your browser doesn't support embedded video.

What is SMB1001 Gold Certification?

SMB1001 Gold Certification validates an organisation’s expertise, reliability, and standards in managed services delivery. The certification requires a thorough assessment of our processes, technical capabilities, security protocols, and service quality.

InnovateX Solutions Named Registered Reseller

Tue, 26 Aug 2025 00:00:00 +0000

InnovateX Solutions is now a registered reseller for Logitech, a global leader in video conferencing solutions and personal workspace devices. Through our partnership with an Australian-based distributor, we can now supply Logitech products to businesses, non-profits, and government organisations across Australia.

Exciting Partnership: InnovateX Solutions Now Reselling Ubiquiti UniFi Networking and Security Products

Mon, 11 Aug 2025 00:00:00 +0000

InnovateX Solutions has partnered with an Australian-based distributor to become a registered reseller of the Ubiquiti UniFi range. That means we can now scope, supply, install, and manage UniFi networking, security, and hardware for our SMB, non-profit, and government clients.

Why Medium Fast-Growing Companies Should Consider Virtual CTO Services

Sat, 02 Aug 2025 00:00:00 +0000

Part of: Fractional Leadership

For medium-sized, fast-growing companies, keeping technology aligned with the pace of business growth is a constant challenge. You probably have a managed service provider (MSP) or internal IT staff handling daily operations: network maintenance, software updates, helpdesk. What that operational layer doesn’t usually deliver is the strategic direction the business needs over the next 12 to 36 months.

InnovateX Solutions joins the Queensland Government ICT Services panel

Thu, 08 May 2025 00:00:00 +0000

InnovateX Solutions has been approved to join the Queensland Government’s ICTSS.2403 ICT Professional Services Panel, effective 24 February 2025. It’s an important step for our Brisbane-based IT consulting and managed services firm and reflects our work with Queensland’s public sector.