EP. 59: Brenton Johnson on Agentic AI, Security Governance and Building a More Mature MSP
Over thirty years of building, scaling, and advising Australian managed service providers, Nick and I have witnessed the same pattern play out with every major technology wave. Whether it was the transition from dial up remote management to dedicated RMM platforms, the shift into cloud hosted infrastructure, or the current rush toward artificial intelligence and cybersecurity frameworks, service providers frequently rush to adopt the newest tooling before their internal operations are ready to sustain it. The underlying operational truth remains unchanged: shiny software and cutting edge automation never solve a fundamental lack of business process, clear governance, or client alignment. When an MSP experiences friction, whether that appears as ballooning unbillable hours, security oversights, or failed internal rollouts, the root cause is almost never technical capability. It is operational maturity. In this episode of MSP Mastery Podcast, Nick and I sat down once again with our longtime colleague Brenton Johnson, Managing Director of Uptake Digital. Brenton is someone who shares our passion for looking beyond standard vendor narratives to question conventional industry wisdom. Having scaled Uptake Digital with a deliberate focus on leadership, culture, and high service maturity, his recent work building out agentic artificial intelligence workflows and navigating client security conversations provides a compelling real world validation of the principles we have coached business owners through for decades. The lessons from his journey highlight exactly where managed service providers need to focus their attention today: structuring operational context, establishing clear governance, elevating client communication from technical execution to risk management, and committing to disciplined, step by step business maturity.
MSP Mastery
10/5/20267 min read
Over thirty years of building, scaling, and advising Australian managed service providers, Nick and I have witnessed the same pattern play out with every major technology wave. Whether it was the transition from dial up remote management to dedicated RMM platforms, the shift into cloud hosted infrastructure, or the current rush toward artificial intelligence and cybersecurity frameworks, service providers frequently rush to adopt the newest tooling before their internal operations are ready to sustain it. The underlying operational truth remains unchanged: shiny software and cutting edge automation never solve a fundamental lack of business process, clear governance, or client alignment. When an MSP experiences friction, whether that appears as ballooning unbillable hours, security oversights, or failed internal rollouts, the root cause is almost never technical capability. It is operational maturity.
In this episode of MSP Mastery Podcast, Nick and I sat down once again with our longtime colleague Brenton Johnson, Managing Director of Uptake Digital. Brenton is someone who shares our passion for looking beyond standard vendor narratives to question conventional industry wisdom. Having scaled Uptake Digital with a deliberate focus on leadership, culture, and high service maturity, his recent work building out agentic artificial intelligence workflows and navigating client security conversations provides a compelling real world validation of the principles we have coached business owners through for decades. The lessons from his journey highlight exactly where managed service providers need to focus their attention today: structuring operational context, establishing clear governance, elevating client communication from technical execution to risk management, and committing to disciplined, step by step business maturity.
Why Your Data Context Matters Far More Than Your Choice of Tools
One of the most persistent traps we see in the managed service provider market is vendor lock in masquerading as operational efficiency. Too many business owners buy an integrated suite expecting an out of the box operational transformation, only to discover their critical operational data is trapped within proprietary databases that make custom automation painful and expensive. Nick and I have always taught that operational independence begins with data control. If your team cannot cleanly extract, manipulate, and review your historical service data, you cannot build truly differentiated customer experiences or agile service delivery models.
Brenton’s architectural approach at Uptake Digital reinforces this exact lesson. While standard industry practice often dictates adopting rigid, closed ecosystems, Uptake Digital chose to retain tools such as Zendesk and modern modular platforms because of their open programmatic interfaces. As the market enters an era defined by artificial intelligence and automated agents, that historical architectural discipline has become a massive competitive differentiator. By extracting hundreds of thousands of historical service tickets, configuration records, and client interactions into standardised, accessible formats, Brenton was able to build a searchable knowledge repository that artificial intelligence models can actively parse.
The strategic takeaway for service leaders is crucial: modern artificial intelligence models do not need to be taught how to resolve standard operating system glitches or technical anomalies, because they have already ingested billions of parameters of technical data. What they lack entirely is the specific operational context of your business and your client environments. If your data remains unstructured, buried inside fragmented platforms, or obscured by erratic engineer notes, advanced tooling will hallucinate or fail entirely. True service delivery excellence requires MSPs to treat documentation and operational context as first class corporate assets, ensuring data is portable, transparent, and structured cleanly for both human engineers and intelligent automation.
The Governance Guardrail: Why Senior Oversight Cannot Be Automated
A common misconception among business owners exploring automation is that artificial intelligence eliminates the need for expensive, experienced talent. Nick and I frequently remind our consulting clients that whenever you accelerate execution speed through automation, you exponentially increase the necessity of robust governance and senior oversight. In the past, a junior technician lacked the access or knowledge to deploy sweeping script changes across client estates without manual intervention from a senior team leader. Today, a junior engineer can easily prompt an artificial intelligence tool to generate complex administration scripts, bypass standard testing, and apply policies directly to production environments if strict governance is absent.
During this episode of MSP Mastery Podcast, Brenton highlighted this exact dynamic. Rather than replacing senior developers and experienced systems engineers, the rise of agentic tools has actually made top tier professionals more vital to business operations than ever. The role of the experienced engineer is no longer simply typing out syntax; it is architectural validation, threat modeling, change management, and governance. At Uptake Digital, workflows are intentionally designed with humans in the loop, pairing automated generation with adversarial model reviews and strict manual assignments before policies hit client environments.
This distinction is what separates mature managed service providers from reactive operators. Operational governance is not an administrative burden; it is the commercial safeguard that prevents rapid technical execution from turning into catastrophic client downtime. When you automate tasks without enforcing rigorous change control frameworks, peer review mechanisms, and least privilege access protocols, you are not scaling your business; you are merely scaling unmanaged risk.
Moving From Technical Execution to Commercial Risk Calibration
Throughout our thirty years running managed service providers, the hardest transition for most technical founders has always been learning how to talk to clients about security. Technicians naturally gravitate toward discussing technical features: multifactor authentication configurations, application allowlisting rules, endpoint detection alerts, and patch management schedules. However, business executives do not purchase technical features. They evaluate risk, operational disruption, and financial return. If an MSP attempts to sell security by demanding clients simply buy a predefined stack without understanding the commercial context, the relationship inevitably breaks down into price resistance and frustration.
Brenton shared that Uptake Digital experiences this exact conversation dynamic, particularly within the not for profit sector and growing small to mid sized enterprises. Clients regularly declare that they want to finish security, treating it as a tick the box exercise rather than an ongoing commercial capability. When service providers try to enforce highly restrictive technologies such as application ring fencing or rigid endpoint controls without adequate client communication, end users push back aggressively against the friction, labeling the IT department as an obstacle to business productivity.
The proven framework we advise business owners to implement is a shared responsibility model anchored entirely in executive risk appetite. Your role as an MSP leader is to help the client understand that operational convenience and total security sit on opposite ends of the same spectrum. Implementing strict zero trust boundaries or intricate conditional access policies carries a tangible change management cost. If a business owner chooses a lower level of spend, they must explicitly own the residual operational risk. Mature service delivery involves calibrating this middle ground collaboratively, ensuring that board level decision makers recognize that cybersecurity is an enterprise risk management function, directly comparable to legal compliance or human resources, rather than a back office technical issue.
The Case Study: Building a Repeatable Context Scaffold From Ticket Chaos
Every managed service provider struggles with the operational drag of repetitive change reviews and security audits. A standout example from Brenton’s recent operational journey illustrates how disciplined context curation can transform an expensive manual workflow into a streamlined, high value asset.
The Operational Bottleneck
Reviewing client configurations, such as Microsoft Entra conditional access rules, typically requires a senior engineer to dig manually through years of historical tickets, decipher vague internal notes, track down half remembered verbal approvals, and reconstruct why certain exclusions were granted for remote or executive users. Because this investigative work is tedious and unbillable at standard rates, it is rarely maintained with sufficient detail, leaving the MSP vulnerable to configuration drift and compliance failures.
The Context Driven Solution
Rather than expecting high cost engineers to manually compile historical summaries, Brenton deployed structured artificial intelligence workflows to comb through historical service tickets and automatically extract every recorded conditional access modification. The tool identified ticket references, dates, technical rationale, and recorded approvers, flagging specific instances where context was missing so engineers could resolve targeted questions quickly. This extracted context was compiled into clean, structured Markdown files on local disk, creating an authoritative, audited changelog for the client environment.
The Strategic Analysis
From our perspective as service delivery consultants, the critical insight here is not the technology used to generate the document, but the operational decision to curate focused, offline context before deploying automation. Many MSP owners make the mistake of dumping raw data streams into context windows or relying on real time search connectors, which clutters execution, exceeds token boundaries, and causes models to miss subtle dependencies. By creating a standardized, high quality scaffold for one client, Brenton produced a repeatable template and operational skill that can be deployed across every customer in the business. This approach mirrors our core service delivery principle: solve an operational problem by defining the process structure first, validate it with expert human review, and only then operationalise it across the wider client base to drive scalable profitability.
The Reality of Operational Maturity: Incremental Growth Trumps Shortcuts
The central takeaway that Nick and I emphasize to every MSP leadership team is that operational maturity cannot be bypassed. Frameworks such as Service Leadership and peer operational models define distinct maturity levels for a reason: a business operating at a lower maturity tier cannot instantly jump to advanced enterprise operations simply by adopting sophisticated tools. If an organization lacks basic change management discipline, attempts to automate client onboarding or implement complex governance policies will only create confusion and amplify hidden inefficiencies.
True scalability comes from mastering the fundamentals. When your service desk has reliable triage processes, consistent ticket data, and standardized naming conventions, adopting advanced artificial intelligence workflows becomes a natural progression rather than a chaotic disruption. Likewise, when your account managers understand how to converse with clients about strategic risk instead of technical specifications, you attract clients who value enterprise grade rigor and are willing to pay for it.
Scaling a thriving managed service provider requires balancing cutting edge technical curiosity with timeless operational discipline. As artificial intelligence continues to reshape the IT landscape, the MSPs that succeed will not be those that write the most custom code or buy the largest vendor suites. The winners will be the leaders who establish crystal clear data architecture, maintain uncompromising human governance, and continually invest in lifting the operational maturity of their teams.
Nick and I, alongside the entire MSP Mastery team, are deeply committed to helping service providers navigate these transitions with practical, battle tested strategies. If you are currently reflecting on your own service delivery processes, reviewing your tooling architecture, or working to elevate your client security conversations, we would love to hear your thoughts. Reach out to Nick and me directly or connect with our community to continue the conversation.
