IT strategy and vCIO | High Point, NC
IT Strategy and Virtual CIO (vCIO) Services for North Carolina Businesses
A growing business needs someone deciding what to buy, what to replace and what to secure next, not just someone fixing what broke. Preferred Data provides IT strategy and virtual CIO (vCIO) services to manufacturers and small businesses across North Carolina as part of our managed IT plans, from quarterly roadmap reviews to a dedicated vCIO. Schedule a consultation or call (336) 886-3282.
Common problems, and what solves them
- In business since 1987
- 39 years
- Active clients
- 100+
- Average client tenure
- 20+ years
- BBB Accredited rating
- A+
- On-site radius from High Point
- 200 mi
- Threat monitoring on every plan
- 24/7
What is a vCIO, or virtual CIO?
A vCIO is an outside technology leader who does the planning part of a CIO's job for your business: setting the IT roadmap, building the budget, reviewing risk and reporting to the owners, on a set schedule rather than full time. A full-time CIO is an executive hire: the U.S. Bureau of Labor Statistics puts the median pay of computer and information systems managers at $175,140 (May 2025) and lists five or more years of experience as typical for the role.
Most small and mid-sized businesses do not need that executive full time, but they do need the decisions made. Without them, IT spending is driven by whatever broke last, and planning happens after the fact. Read what a vCIO does and why NC manufacturers need one for a longer explanation.
Key takeaway: A vCIO does not fix computers. The job is deciding what the business should buy, replace, secure and stop paying for, and putting it in writing.
What IT strategy does each Preferred Data plan include?
Every Preferred Plan includes some planning, and it deepens at each level: an annual technology review in Preferred Essentials, quarterly business reviews with an IT roadmap and budget in Preferred Professional, and a dedicated vCIO with a monthly strategy cadence in Preferred Complete. Full plan details are on the pricing page.
| What you get | Essentials | Professional | Complete |
|---|---|---|---|
| Planning cadence | Annual technology review | Quarterly business reviews | Monthly strategy meetings with a dedicated vCIO |
| Written IT roadmap and budget | Not included | Included | Included |
| Compliance readiness management (CMMC and NIST 800-171) | Not included | Add-on | Included |
| AI enablement program (policy, training, workflow automation) | Not included | Add-on | Included |
| Vulnerability scanning and annual security assessment | Not included | Not included | Included |
| 24/7 threat detection and response | Included | Included | Included |
Preferred Professional is the plan we recommend for most businesses, and it is where a real IT roadmap starts. Preferred Complete fits businesses that want a named technology leader at the table every month, are working toward CMMC, or are rolling out AI.
vCIO vs full-time CIO vs no IT leadership: which fits your business?
A full-time CIO makes sense once technology decisions fill someone's whole week; before that, a vCIO gives you the planning without the executive salary. Having no one in the role often costs more over time, because purchases, renewals and security gaps are handled only when they become urgent.
| Factor | No one owns IT strategy | vCIO (Preferred Data) | Full-time CIO or IT director |
|---|---|---|---|
| Cost | No line item, but unplanned spending | Planning in every plan; dedicated vCIO in Preferred Complete | Executive salary: $175,140 median for the category (BLS, May 2025), plus benefits |
| How decisions get made | When something breaks or a vendor calls | On a set review schedule, in writing | Continuously, in-house |
| Budget visibility | Surprises | A written roadmap and budget | Full, if the person is good |
| Hands-on support team | Whoever you call | The managed IT team that runs your systems | Still needs a team or a provider |
| Best fit | Very small offices with little at stake | Growing businesses without a full-time technology executive | Large firms where IT is a department |
What goes into an IT strategy and budget for a small business?
A useful IT strategy covers four things: what equipment and software must be replaced and when, what security and compliance obligations apply, what the business is paying for that it no longer needs, and what projects will support next year's plans. Deadlines set by vendors drive much of it: Microsoft ended security updates for Windows 10 on October 14, 2025, so any PC still on it needed a replacement plan.
Start with our free IT budget planning template and cybersecurity budget guide, or rough out numbers with our IT tools.
- Lifecycle: servers, PCs, firewalls and software with their support end dates, so replacements are budgeted rather than emergencies
- Security governance: NIST added a "Govern" function to its Cybersecurity Framework 2.0, released February 26, 2024, treating cybersecurity strategy as a leadership decision; the framework includes quick-start guides for small businesses
- Compliance: CMMC and NIST 800-171 readiness for defense suppliers, and what cyber-insurance carriers ask to see
- Spending: licenses, subscriptions and contracts reviewed for what is used
- Projects: new sites, hires, systems and AI, scoped and timed against the budget
When does a growing North Carolina business need IT strategy?
Usually when growth starts to strain the setup that worked for a smaller company: a second location, a jump in hires, a customer or insurer asking about security, or an ERP and server nearing the end of their life. North Carolina's small businesses employed 1.8 million people in 2025, according to the Office of Governor Josh Stein, and a business at that stage rarely has a technology executive on the payroll.
- You are opening a new site, adding a shift or hiring faster than IT can set people up
- A customer, a prime contractor or your insurer sent a security questionnaire
- Your server, ERP or phone system is old and nobody has a replacement plan
- You cannot say what you spend on technology each year, or why
- You are buying a business, or getting ready to sell one: see M&A technology due diligence
Who provides vCIO services in High Point and the Piedmont Triad?
Preferred Data provides IT strategy and vCIO services from its office at 1208 Eastchester Drive in High Point, and works on-site anywhere within 200 miles, covering Greensboro, Winston-Salem, Charlotte and Raleigh. The same team that plans your IT also runs it, so the roadmap is written by people who know your systems.
- Manufacturers, including furniture and textile businesses, see our manufacturing IT page
- Professional services and non-profits
- Our strategic approach explains how we plan with clients
IT strategy and vCIO questions
What does a vCIO do?
A vCIO plans your technology: a written IT roadmap and budget, reviews of risk, security and compliance, advice on purchases and vendors, and regular meetings with the owners. At Preferred Data a dedicated vCIO with a monthly strategy cadence is included in Preferred Complete.
How much does a virtual CIO cost?
At Preferred Data, IT planning is included in our managed IT plans rather than sold by the hour: quarterly roadmap reviews in Preferred Professional and a dedicated vCIO in Preferred Complete. Plans are priced per user per month; request a free quote on the pricing page or call (336) 886-3282.
What is the difference between a vCIO and an MSP?
An MSP (managed service provider) runs and supports your IT day to day. A vCIO plans it: what to buy, replace and secure, and what it will cost. At Preferred Data the two come together, so the plan is written by the team that runs your systems.
What is a quarterly business review in IT?
It is a scheduled meeting where your IT provider reviews what happened over the quarter, what is coming up (renewals, end-of-life equipment, security gaps) and updates the roadmap and budget. Quarterly business reviews with an IT roadmap and budget are included in Preferred Professional.
Do we need a vCIO if we already have an IT person?
Often, yes. An in-house IT person is usually busy keeping things running, and planning, budgeting and security governance get squeezed. A vCIO works alongside them and gives the owners a written plan.
Can a vCIO help with CMMC or cyber insurance requirements?
Yes, as part of the plan. Preferred Complete includes compliance readiness management for CMMC and NIST 800-171, and every plan is built to the controls insurers commonly ask about. CMMC certification itself is granted by an authorized third-party assessor, not by Preferred Data.
Do you offer vCIO services in Greensboro, Winston-Salem and Charlotte?
Yes. We are based in High Point and work on-site within 200 miles, covering the Piedmont Triad, Charlotte, Raleigh and most of North Carolina. Strategy meetings can be held in person or remotely.
Sources
- U.S. Bureau of Labor Statistics, Occupational Outlook Handbook: Computer and Information Systems Managers
- Microsoft Learn, Windows 10 reaching end of support
- NIST, NIST Releases Version 2.0 of Landmark Cybersecurity Framework (February 26, 2024)
- Office of Governor Josh Stein, Small Business Week proclamation (May 4, 2026)
Services that solve this, and related reading
Get a written IT roadmap and budget for your business
Tell us where the business is headed over the next few years. We will review your current technology and show you what a roadmap and a vCIO would look like for you, with the price in writing.
Preferred Data Corporation, 1208 Eastchester Drive, Suite 131, High Point, NC 27265