Jim Slinkard

I had the pleasure of meeting Jon McNeill and discussing his approach to operational improvement through what he calls a simple but powerful algorithm: keep asking “Why?” What stood out most was how many organizations carry processes that exist simply because “that’s how it’s always been done.” By repeatedly asking why, Jon has helped companies uncover unnecessary complexity, eliminate wasted steps, and dramatically shorten operational cycles. Sometimes innovation isn’t about adding more technology or layers it’s about challenging assumptions and simplifying what already exists. A great reminder that curiosity and critical thinking can be some of the most powerful tools in leadership and operational excellence.

23

1 Comment

🎯 Free Compliance Alignment — without the nonsense. Ever seen a compliance firm drop a 200-page “scope” doc that tells you everything you don’t need — just to run up the bill? Yeah… we’re not those guys. At Iron City IT Advisors , they take a straight-shooting, in-depth approach: ✅ Keep it in scope. ✅ Cut the fluff. ✅ Build something that actually fits your environment — not a generic checkbox factory. So we made something useful — and yep, it’s free (like actually free): 🚀 SOC 2 + NIST CSF Alignment Toolkit It’s a unified mapping where every SOC 2 Trust Services Criterion (CC1–CC9) ties directly to NIST CSF 2.0 controls — giving you one defensible, audit-ready playbook. You’ll get: 📘 A full SOC 2 → NIST CSF crosswalk ⚙️ Practical control examples you can use today 🧭 GRC implementation guidance 📊 Market insights and compliance trends Grab it here → https://lnkd.in/gdWNw52v Because good compliance doesn’t have to feel like punishment. #Cybersecurity #SOC2 #NISTCSF #Compliance #vCISO #GRC #AuditReady #IronCityITAdvisors #SecurityLeadership

4

2 Comments

One of those projects that seems small but quietly removes friction across the entire company. I’ve standardized and deployed our core office printers across all locations using automated deployment through Datto RMM. What that means in practice: • The same printers are available on all company-managed devices • Users can travel between sites and print immediately without setup • New devices receive the correct printers automatically at provisioning • Fewer tickets, fewer manual installs, less tribal knowledge Behind the scenes, this required normalizing naming conventions, cleaning up legacy drivers, and building reliable deployment logic that works across states and buildings. This is the kind of work I enjoy most. Not flashy, but it scales. Remove small points of friction and the organization moves faster without noticing why. Specialized printer automations are already in place, with Zebra deployments coming next. Automation is only valuable when it quietly disappears into daily operations. #ITLeadership #Automation #EndpointManagement #DattoRMM #OperationalExcellence #ScalableIT

11

2 Comments

Earlier this week, I had the opportunity to present to a group of IT and Operations leaders in the Healthcare Certification space on laying the foundation for effective Copilot usage across the enterprise. The response was energizing, especially around the importance of clear SharePoint ownership, storage management, archival practices, and structured documentation. These may seem like operational details, but they are absolutely critical to ensuring AI tools like Copilot provide meaningful, secure, and reliable assistance. We have seen firsthand that without proper governance, permissions, and cleanup, even the most powerful AI will not deliver value. But with the right foundation, including policies, training, and executive sponsorship, organizations can unlock Copilot’s full potential. I appreciated the thoughtful discussion and the shared experiences from others on the same journey. #Copilot #AIAdoption #SharePointGovernance #HealthcareIT #DigitalTransformation #Microsoft365

37

5 Comments

Using proactive monitoring and detection to address risks early in the 'kill chain' isn't just smart security. It's smart business.

9

Big wake-up call 🚨 👉When attackers hijack your management plane, your own tools become the weapon. 👉The Stryker Corporation incident shows how misuse of Microsoft Intune can cause massive operational damage, no malware required. 👉Act now: 🔐 Lock down admin rights, enforce least privilege & tight RBAC 🛡️ Enforce phishing-resistant MFA with Microsoft Entra ID 👥 Require dual approvals for device wipes & high-impact changes 🔍 Monitor privileged account creation & global admin elevation 💾 Test backups like your business depends on it because it does ⚡ Drill IR & recovery plans for large-scale destructive attacks 👉 Guidance from Cybersecurity and Infrastructure Security Agency is clear: 👉Harden now. Don’t learn the hard way. #CyberSecurity #CISO #IdentitySecurity #EndpointSecurity #CloudSecurity #IncidentResponse #BusinessContinuity #RiskManagement https://lnkd.in/ep3NdAjV

5

2 Comments

Every environment has some form of governance. Architecture reviews. Change control. Approval processes. I’ve seen it handled a few different ways: 1. Tight governance up front Everything gets reviewed before it moves. Better consistency, fewer surprises. But it can slow things down and push work into side channels. 2. Minimal governance Teams move quickly and make decisions locally. Faster delivery. But consistency drifts and risk shows up later. 3. Lightweight governance with escalation Most work moves freely, with defined points where things get pulled in for review. Works well when people know when to engage it. Breaks down when that line isn’t clear. I’ve generally seen the best results when governance is predictable and selective, not constant. Too much governance, and people work around it. Too little, and you’re left figuring out who owns it, what exists, and whether anyone ever reviewed it. Where have you seen that balance land?

2