From small firms to enterprises: presales for all

For years the security conversation at most Telcos has been split in two. Large enterprise accounts get a dedicated team, architects, bids and long projects. Everyone else, the small and medium businesses, gets a bundle on the price list and a rep who is expected to sell it between a fibre upgrade and a mobile renewal.

That split made sense when security for large customers meant bespoke projects and security for small ones meant antivirus. It makes much less sense today. Every business customer, whatever its size, now has a public perimeter, a mail domain, staff credentials in circulation, suppliers connecting remotely and a board or an owner asking whether the company is exposed. The questions are the same. What changes is who asks them, how many people are on the call and how the sale is closed.

The need is everywhere, the preparation is not

The data does not show a market that stops at a certain headcount. Eurostat's 2024 survey on ICT security in enterprises found that more than one EU enterprise in five suffered consequences from an ICT security incident in 2023. The same survey shows where the gap is: 29% of small enterprises carried out ICT risk assessments, against 76% of large ones.

The Verizon 2025 Data Breach Investigations Report adds the other side of the picture. In the breaches it analysed at small and medium businesses, ransomware was present in 88% of cases, against 39% at large organisations. Large companies are not safe; they are better prepared. Small ones are just as exposed and much less equipped.

Read together, those figures say one thing to a Telco: every business customer needs a security conversation, and the less prepared the customer is, the more the quality of that conversation depends on the person selling.

One method across the whole base

What does not change from the small firm to the large enterprise is the method. A security sale that works starts from a fact about the customer, not from a category of product.

The lead generation co-worker reads the signals from the outside, using public data only: the website and its technology, the services exposed on public IP addresses, DNS and email protection, credentials in known breaches. Each finding is matched to the product in your catalogue that resolves it. The sales co-worker then adds what only you know, contracts, active services, usage and tickets, and turns it into a customer sheet with the opportunities in order of priority and a script your rep can follow.

That holds for a small accounting firm and for a manufacturer with plants in several regions. The signals are the same kind of evidence. The scale is different.

What changes with size

Size changes the moves, not the method.

With a small firm the rep often talks to the owner, who decides alone and decides quickly, but who is not ready for a large project. Here the door opener does most of the work: a recurring vulnerability assessment or data breach monitoring, quick to activate and low in cost, that opens the relationship and brings in the data for the next sale.

With a mid-sized company there is usually an IT manager, sometimes an external IT supplier, and the first objection is technical. The evidence carries the call: an exposed service on a named address, a domain without DMARC, credentials of identified staff in a breach. The rep does not need to out-argue the IT manager. They need to bring a fact the IT manager will want to check.

With a large enterprise the perimeter is wider, there are more domains, more sites and more suppliers, and the decision involves several people. Here the value of the co-worker is breadth and speed: a consistent picture across every entity, prepared before the meeting, so the account team arrives with a prioritised view instead of a generic capabilities deck. And when the conversation needs a specialist, the call still ends with a result: a meeting with the expert, booked.

Large customers also pull the small ones in. Supply-chain requirements and NIS2 push large organisations to ask for evidence from their suppliers, and many of those suppliers are your small and medium customers. Selling security across the whole base means you are in both conversations.

Why it matters for a Telco

A Telco's advantage is the relationship it already has with every business customer, of every size. Splitting that base into "enterprise, where we do security" and "everyone else, where we sell a bundle" leaves most of the relationship unused.

The bottleneck has always been presales. There are never enough specialists to prepare every conversation, and the ones you have go to the largest accounts first. A co-worker removes that limit: the expert's preparation, available to every rep on every account, white-label and built on your own catalogue.

The result is a single way of selling security to every business customer: the same signals, the same catalogue, the same four moves from the first call to the signature. The size of the customer decides which move comes first. It no longer decides whether the conversation happens at all.