Navigating AI Adoption and Governance for Small Businesses: Interview with David Espindola

About this episode

The episode centers on practical approaches for Managed Service Providers (MSPs) and IT leaders assessing artificial intelligence (AI) adoption, with David Espindola detailing the crucial distinction between “maker,” “shaper,” and “taker” strategies. David Espindola emphasizes that organizations must intentionally decide their role in AI development and use—whether building proprietary systems, shaping solutions atop existing models, or simply consuming pre-built capabilities. This decision, he notes, is foundational for aligning risk tolerance, investment, and technical capacity with business goals, especially given the rapid pace and inherent uncertainty in AI’s evolution.

Supporting this framework, David Espindola references insights from a Small Business Administration project, which found that most small businesses are struggling to define applicable use cases for AI and tend toward risk-avoidant stances despite external pressures to adopt the technology. He stresses that AI implementation should not be a solution in search of a problem; rather, an organization’s readiness, risk, investment capability, and specific industry context must determine its approach. Key recommendations include conducting readiness assessments, appointing internal AI champions, and starting with small, low-risk pilot projects to build internal understanding and governance processes before scaling.

The discussion broadens to ethical and governance considerations, with both David Espindola and the host cautioning that responsible AI adoption is a business necessity rather than a compliance checkbox. They advocate for formal employee training, the establishment of clear usage policies, and strict controls over tool access to mitigate risks such as data leakage, hallucinated outputs, and misaligned communications. The emphasis is on building practical safeguards rather than pursuing AI for its own sake, reflecting a pragmatic, risk-managed approach tailored to each organization’s context.

For MSPs and IT service providers, the practical takeaways are clear: pursuing AI adoption requires a methodical, risk-aware strategy focused on business relevance, operational governance, and targeted experimentation. The harms of rushed deployments, poor change management, or lack of internal education are underscored, with the implication that long-term value and reduced exposure are found in deliberate, well-governed adoption efforts. Readiness assessments, pilot programs, and robust policy frameworks emerge as the primary enablers of sustainable outcomes in this rapidly evolving landscape.

💼 All Our Sponsors

Support the vendors who support the show:

👉 https://businessof.tech/sponsors/

🚀 Join Business of Tech Plus

Get exclusive access to investigative reports, vendor analysis, leadership briefings, and more.

👉 https://businessof.tech/plus

🎧 Subscribe to the Business of Tech

Want the show on your favorite podcast app or prefer the written versions of each story?

📲 https://www.businessof.tech/subscribe

📰 Story Links & Sources

Looking for the links from today’s stories?

Every episode script — with full source links — is posted at:

🌐 https://www.businessof.tech

🎙 Want to Be a Guest?

Pitch your story or appear on Business of Tech: Daily 10-Minute IT Services Insights:

💬 https://www.podmatch.com/hostdetailpreview/businessoftech

🔗 Follow Business of Tech

LinkedIn: https://www.linkedin.com/company/28908079

YouTube: https://youtube.com/mspradio

Bluesky: https://bsky.app/profile/businessof.tech

Instagram: https://www.instagram.com/mspradio

TikTok: https://www.tiktok.com/@businessoftech

Facebook: https://www.facebook.com/mspradionews

Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.