Mergers & Acquisitions

A government-wide set of security and compliance controls a technology company must meet before U.S. federal agencies are allowed to put government data into its system. FedRAMP High carries ~425 controls (versus ~95 for SOC 2) and requires a separate enclave, encryption in transit and at rest, FedRAMP-only subprocessors, and assessment by an accredited third-party assessor.

After a 3PAO assessment, a company must find a federal sponsor — a CISO or CIO within an agency (or the DoD/DoW) willing to underwrite its cyber risk and grant an Authorization to Operate. This is the step where a senior official stakes their reputation and job on the vendor.

Every part of FedRAMP can be solved with enough money and time except getting the sponsor — paying for that is bribing the government and is illegal. Sponsors are won through funded mission owners, program budget holders, networking, and combined top-down (political appointees, agency secretaries) and bottom-up pressure.

FedRAMP is annually re-audited and requires monthly continuous monitoring: a check-in with the government across CVEs, misconfigurations, and overall security posture, with strict remediation SLAs (30 days for high-criticality findings, 90 days for medium).

Doing FedRAMP alone is like buying land in the most exclusive zip code and building your own house (permits, architects, supplies, inspection, forever). Knox instead runs the 'luxury condo building' on Main Street: customers move into a single-tenant floor, bring their own furniture (CI/CD, APM, hyperscaler), and inherit ~80% of the 425 controls plus Knox's agency sponsors.

In an authorization-gated market, the fastest (if not cheapest) route to FedRAMP can be to acquire a company that already holds it, then build on that boundary — rather than pursue a multi-year organic authorization.

Because so few vendors clear FedRAMP, entire federal software categories run on one or two authorized options — ITSM has only ServiceNow and Salesforce; the OMB HRIS RFP came down to Oracle and Workday. Monopoly/duopoly conditions push prices up and product quality years behind commercial equivalents.

The federal government rarely buys anything for under $1M — the contracting overhead makes smaller deals uneconomic — and it purchases for 10,000–100,000 users at a time, favoring vendors already proven at commercial scale.

Before spending a dollar on federal, ask whether you've proven yourself at enterprise scale commercially — the one gate that can't be spun up. Commercial-first companies typically qualify around ~200 people / ~$50M revenue with a few enterprise logos; defense-tech, government-first companies can pursue it as early as 50–75 people.

FedRAMP acts as a pre-diligenced, CYA-grade trust signal in commercial regulated markets. After a certification announcement the first inbound is often a financial-services or healthcare buyer, not a government agency — so FedRAMP behaves like a 'super SOC 2' that differentiates and closes commercial deals.

Defend content investment internally on three fronts: (1) it outperforms traditional marketing on cost per qualified lead, (2) it generates earned-media value the company would otherwise pay Meta and Google for, and (3) it reframes and lowers the cost of the top of the funnel.

Build media brands as verticals that each map to a product hub (marketing, sales, entrepreneurship, AI), starting from a customer pain point and using TAM plus coverage gaps as the signal to add a brand or channel.

For each media vertical, decide whether to build a brand from scratch, partner with existing creators/journalists, or acquire an established brand — driven by the pace of change in the category and whether trusted voices already exist.

After acquiring a media brand, never meddle with the editorial. Meddle with the editorial → meddle with the audience → meddle with the trust. Instead, arm the brand with insights, production, distribution, and growth capital while leaving the content itself alone.

Produce video first, then repurpose the single asset: video → transcript → audio podcast, newsletter, short-form clips, and SEO/AEO blog post. A human owns the original idea at the start, AI compresses the middle (scripting, outlining, clipping, localization), and a human quality-gates the output before it publishes.

Start and perfect your video strategy on YouTube, where scale gives you the richest early signal on what audiences like, then treat platforms like LinkedIn as new distribution for that content — not as derivative afterthoughts — via a data-trained clipping strategy.

At scale, media can sit under a media-believing CMO. But early-stage media should report to the founder/CEO, not marketing — the founder best knows what the brand needs to be, and marketing ownership risks flattening editorial into product-marketing nobody wants to watch.

HubSpot's replacement for inbound marketing: a way to drive compounding growth in partnership with AI that constantly learns and compounds across paid media, creators, and content, rather than relying on keyword-ranking and hand-raiser capture.

A two-tier model of leverage: the number-one and permanent form is talent — genuinely great people — and the number-two, fast-compounding form is technology (today, machine learning and AI). Technology multiplies talented people; it does not replace them.

The principle that a true A-player raises the standard of everyone around them, while a B- or C-player imposes a hidden tax that drags the whole system down. Illustrated by Kobe leveling up the Lakers and Michael Jordan's teammates learning 'no days off.'

The discipline of continuously scouting talent even with no open role — treating every conference, meeting, and relationship as sourcing — so that when a need arises you already have a list of people to call.

A three-part talent screen: a demonstrated track record of results (evidence they know what to do), resilience (how they responded to getting knocked down — ownership vs. victimhood), and hiring people who are better or smarter than you at the role.

The career thesis that the surest way to earn the next opportunity is to be extraordinary in your current role, so that results — not networking or shortcuts — pull opportunities to you unsolicited.

The practice of deliberately creating a gap — Chris forced himself to do nothing for six months — before the next move, on the premise that when you stop forcing an outcome, the right path and clarity show up.

A decision matrix with a person's non-negotiable values down the vertical axis (people, trust, integrity, emotional safety, belief in the vision, a path to winning, mutual respect) and the candidate opportunities across the horizontal axis, scored by which boxes each opportunity checks.

An M&A integration playbook whose single biggest success factor is how and when you bring people along and relentless over-communication — including a first all-hands that answers employees' real question (am I safe, what does this mean for me) before any company history or financials.

Deliberately rotate through operations, marketing, partnerships, consulting, sales ops, and product before ever carrying a quota, so you understand everything that actually affects revenue — rather than reaching the CRO seat straight up the sales track.

Stay in every role at least a year (sometimes two) to actually learn the skill, and when hiring, evaluate candidates on increasing responsibility and achievement rather than raw time-in-seat.

Convert a product-led motion into an enterprise motion by getting selective on collaboration-heavy segments, landing two or three teams or divisions, then uniting them under one executive with a combined security, collaboration, and cost case.

If you find yourself in a competitive cycle defined by a competitor's strengths, one of you is in the wrong cycle — and it's probably you. Know your weaknesses so you can avoid the fights they define, and concentrate on the ICP that values your strengths.

A private trial-run roadshow before the public IPO roadshow: executives travel separately to a low-profile event and pitch bankers who signal buy-or-pass on an app, letting the company watch the book oversubscribe and the price move before the S-1 debut.

An acquisition demands the acquirer audit every contract, approval, and pipeline metric to validate revenue durability, and then run a full integration of systems, org, and process — a burden an IPO never imposes.

Startup equity is worth literally zero until an IPO or acquisition. Secondary sales are rare, board-gated, and usually capped; in a buyout, investors are paid first, so if the exit isn't large enough your equity can be nothing.

Revenue leaders should personally build at least one or two agents (you can ask Claude to teach you) so they understand the power, scope, and correctness constraints well enough to manage AI-driven GTM — the same way understanding marketing and ops makes you a better revenue leader.

Lead with deep domain expertise and your own thinking captured on paper first — not with AI-generated first-draft language — then use AI to fill gaps and propel execution rather than to create ideas you can't defend.

The single diagnostic Alex uses to decide when and how to change GTM: at any moment, identify who controls the client's decision, who controls the revenue, and who controls the margin. When the answer changes, the go-to-market must change.

A market maturity curve every industry travels: from a phase where you must educate buyers from scratch (highest margin, lowest competition), through growing awareness and competition, to full commoditization where price pressure peaks.

The 'golden era' — strong demand, high margin, still-low competition, educated buyers — is not a reward to enjoy but the starting point of commoditization, and it signals you should already be building the next product.

A talent principle (from The Science of Scaling) of evaluating people, customers, and standards by their worst-day performance rather than their potential — like a professional athlete who is great on their worst day, not just in flashes.

A portfolio-scaling model where a commoditizing, lower-margin core product is used as an entry wedge, and higher-margin products sitting earlier on the educational curve are layered on top — replicated in-house or acquired — repeating at every level.

A market-intelligence practice of tracking where venture capital — especially seed and pre-seed — allocates capital, categorized by segment, as the cheapest and smartest signal of the next big thing two to three years out.

An AI-native operating default: when you have a real need you'd pay for but can't find the right tool (or it's too expensive), build it yourself with AI coding tools rather than waiting on a vendor.

The consistent core set of capabilities the market keeps asking to have in one place: sales engagement (cadences and sequences), conversation intelligence, data and enrichment, and predictable forecasting.

Bernardo's three equally-likely scenarios for these platforms: (1) consolidation and rebranding succeed into specialized all-in-one platforms; (2) vendors can't escape their legacy branding and stay boxed into what they were known for; (3) a platform becomes the ecosystem — builds a CRM and takes on Salesforce and HubSpot directly.

A re-evaluation discipline: dust off a structured scorecard and grade every vendor across its full, current feature set — not just its original category — and refresh it far more often than quarterly or annually.

The core buyer decision: assemble best-in-class point solutions for each category, or align the whole go-to-market operation on a single consolidated platform. As tools commoditize, the pull is toward picking one 'pony,' driven by cost, bundling economics, and current negotiating leverage.

Partnerships require giving value — and making concessions — before you get anything back, in contrast to the common approach of building a channel purely to sell more of your own product.

A partnership program must be sponsored from the board and executive leadership down, because early concessions and delayed ROI can't survive quarter-to-quarter decision-making.

Treat your strategic partners as potential acquirers, using a multi-year partnership to build relationships, test integration and cultural fit, and position for a strategic exit.

Concentrate limited bandwidth on a select few high-conviction partnerships where the combination is disproportionately valuable, rather than spreading thin across many low-producing relationships.

Build trust so high that a partner would call your personal phone at 3am on a Sunday and know you'll pick up and problem-solve as eagerly as they need.

Deliberately weight travel and face-to-face time above other activities to win partners' hearts and minds and to harvest the off-the-record intelligence that never surfaces on a recorded call.

Give every partner equal access to support, technology teams, and roadmap, and hold commercial terms you'd be comfortable exposing to a partner's competitor — the foundation for managing channel conflict.

Tie the partnership team's KPIs to overall company revenue rather than channel-only revenue, so channel and direct teams succeed together.

Make an honest assessment of whether a partner motion fits your GTM, then either fully commit the resources or don't start — no one-foot-in, one-foot-out programs.