May 11, 2026

When does a company actually need a CIO?

Owners ask me this expecting a headcount number. Fifty employees? A hundred? There isn’t one. I’ve met 200-person companies that genuinely didn’t need IT leadership yet, and 30-person companies that needed it two years ago.

The real triggers are situations, not sizes. Four of them come up constantly.

The first trigger: a contract

The first is a contract. Somewhere in a deal you want, usually buried in a security addendum, a customer asks how you handle their data. Suddenly you need answers about encryption, access control, incident response, and vendor management, in writing, signed by someone accountable. If reading that questionnaire makes your stomach drop, that’s the trigger. I’ve watched deals stall for months over a security questionnaire nobody in the building could answer.

The second: an acquisition, in either direction

The second is an acquisition, in either direction. If you’re buying a company, someone has to figure out what technology you’re actually inheriting and what it will cost to merge or untangle it. If you’re being bought, due diligence will surface every shortcut you’ve ever taken, and the price adjusts accordingly. Both go better when someone started preparing a year earlier.

The third: technology becomes load-bearing

The third is the moment technology becomes the product, or at least becomes load-bearing. A distributor that starts selling through a customer portal is not the same business it was. An insurance agency that lives inside its management system cannot treat that system as an afterthought. When downtime stops being an annoyance and starts being lost revenue per hour, decision-making has to move up a level.

The fourth: spend without an owner

The fourth is quieter and more common: spend has crept past the point where nobody minding it is defensible. Add up software subscriptions, your MSP agreement, telecom, cyber insurance, and the hardware refresh you keep deferring. For a lot of mid-sized companies that lands between half a million and a couple million a year. Companies that spend that much on anything else have someone who owns the number. IT is often the last budget line without an owner.

What’s not on the list

Notice what’s not on the list: “things keep breaking.” That’s a support problem, and you fix it by fixing your support. Hiring a strategist because the help desk is slow is like hiring a CFO because the invoices go out late.

Also notice that none of these four require a full-time hire. That’s the part that took the industry a while to admit. What they require is a senior person with real authority for a slice of every week, someone who sits on your side of the table when the MSP proposes something, the auditor asks something, or the board wants to know why the cyber insurance premium doubled.

If one of those four situations is on your horizon, the worst time to bring in leadership is after it arrives. Questionnaires, diligence, and outages all run on someone else’s clock. The preparation only happens on yours.

← All essays