I.T. Doesn't Just Fix Computers W/Josh Tanner (52:09) #404
You've Been Heard, Monday, March 9th, 2026
Josh Tanner is the one-person IT department at evolvedMD, a Goldman Sachs-backed behavioral health company that integrates mental health into primary care offices across five states. 350 users. PHI in every system. No team. No safety net.
He discovered that most compliance frameworks like SOC2 are outdated theatrics managed by the Big Four. "We are pretending that we are compliant because we are checking the boxes. But what is the purpose of compliance? The point is to reduce risk."
We get into MSP vendor lock-in traps, why your CEO's AI strategy is really just automation, and how to separate tools from services. Plus Josh's framework for talking to executives about cybersecurity without mentioning a single technical term.
The biggest takeaway? When there's a breach, they're not coming after the IT person. They're coming after the company. That makes cybersecurity a board-level issue, not a department problem.