Selling to the NOC: how to reach the infrastructure buying committee
The operator feels the pain, the leader owns the budget, the architect evaluates, the security guardian decides what you may touch. Reach all of them from the first touch — or watch a good pilot end in no decision.
The most expensive sequence in network operations selling is the one that works. The NOC manager replies, the discovery call goes well, the demo lands, and six weeks later the deal is nowhere, because the person who felt the pain never had the authority to buy and the person with the authority never heard the story. That is not a messaging failure. It is a structural one, and it has a structural fix: reach the committee, not a contact.
This piece maps the committee as it actually exists in an infrastructure organization, explains why single-threading fails there, and lays out the three-contact rule I run in The Seven C’s Outreach Program™. The companion on what opens the door in the first place is Signal-Based Outbound for Network Operations.
- Every network operations deal is decided by a committee whether the seller engages it or not: the operator who feels the pain, the leader who owns the budget line, the architect who evaluates, the security guardian who decides what a vendor may touch, the executive who funds anything large, and the gatekeepers who set the clock.
- Single-threaded sequences fail here for a structural reason: the operator who replies has no authority, and the leader who has authority never heard the story. Work three contacts per account in parallel from the first touch, each with their own hook and their own ask.
- Treat the security architect as a stakeholder to win, not a risk to route around. In this market the Critic is a job description, and the vendor who answers the access question first is the vendor who gets the pilot.
1. The cast, and the force each one plays
Every account has the same cast under different titles. The useful way to see them is through the forces in The Seven C’s of Selling™ — because each role tends to play one of the eight, and the role tells you what they need to hear and what they will object to.
| Role | Typical titles | Force they usually play | What they need to hear | Their objection |
|---|---|---|---|---|
| Operator | NOC Manager; Senior Network Engineer; Network Operations Lead | Champion (or Coach) | Fewer tools open per incident; evidence assembled before escalation | “We have tried tools like this” |
| Leader | Director Network Engineering or Operations; VP Infrastructure & Operations | Economic Buyer (mid-market); sponsor (enterprise) | Downtime, hours and audit findings, with a number | “Where does this sit against what we already pay for?” |
| Architect | Network Architect; Principal Engineer; Automation or Platform Lead | Critic or Champion | Extends standards; does not replace the automation they built; API and ITSM fit | “We can build this” |
| Guardian | CISO; Security Architect; GRC lead | Critic | Read-only first; scoped and revocable credentials; what data leaves; where it runs; who sees it | “No vendor touches the network” |
| Executive | CIO; CTO; COO | Economic Buyer (enterprise) | Resilience, audit posture and headcount leverage | “Why now?” |
| Gatekeeper | Procurement; Vendor Risk; Legal | Commercial Alignment | A standard packet and an order form that fits their paper | “Can a company this size pass onboarding?” |
| MSP practice owner | VP Service Delivery; Practice Lead | Economic Buyer | Senior capacity across tenants; margin per contract | “Our engineers are the product” |
Two of these deserve a second look. The operator is the most likely Champion and the least likely to own a budget; a sequence aimed only at them produces enthusiasm and no purchase order. And the guardian is a Critic by job description — which is not a problem to be managed but the single most valuable early conversation in the deal, for reasons I will come to.
2. Why single-threading fails here
The folklore of outbound says: find the person with the pain, get the meeting, let the deal find its way upward. In network operations the pain and the authority sit two or three levels apart, and the organization between them is risk-averse for good reason. Four things go wrong, in order:
- 01The operator replies and cannot buyThe NOC manager is interested, candid and busy. They will take the call. They will not take a budget request to a VP on the strength of one conversation with a vendor.
- 02The leader hears a second-hand storyWhen the operator does raise it, the leader hears a summary of a summary. The evidence standard — the thing that makes this product different from the last one — does not survive the retelling.
- 03The guardian hears about it lastSecurity is consulted when the pilot is being scoped, raises the access question, and the deal pauses for a quarter while a packet is assembled. Entirely avoidable.
- 04Nobody with budget is in the readoutThe pilot succeeds in front of the people who wanted it and nobody who can fund it. This is the most common way a successful pilot ends in no decision.
In Your Biggest Competitor Is “No Decision” I argue that most lost enterprise revenue has no competitor’s name on it. Single-threading is how a network operations deal joins that number.
3. The three-contact rule
Every top-tier and second-tier account in the program is worked with three contacts in parallel from the first touch, each with their own hook and their own ask, starting a day apart so the account sees a coherent story rather than a campaign.
Hooked on the incident pattern
“Six tools open before anyone knows why.” “L1 has an incident number and nothing else.” The ask: bring us your last P1 — a thirty-minute walkthrough, evidence first.
Hooked on the signal and its cost
The verified event and what it cost in hours, downtime or audit exposure. The ask: twenty-five minutes for a candid reaction, with permission to say it is not a fit.
Hooked on access, evidence and standards
“Who changed the deny rule, and was it approved?” “A vendor that starts with no access.” The ask: thirty minutes through their lens — the access model, what data leaves, what it will never do — and the security packet first.
The rules that make it work:
- Never contradict yourself across threads. All three messages describe the product the same way. The hooks differ; the story does not.
- Pause on reply. One reply pauses the account’s other sequences for five business days. A meeting pauses them until it has happened.
- Name the other thread when it helps — “I have written to [Name] on your operations team about the same question” — but only after the first touch to each, and never to imply a conversation that has not happened.
- Pause on opt-out. An opt-out from any contact stops the account for a quarter.
- Ask the operator for the leader. If the operator replies and the leader does not, the first call ends with one question: who owns the budget line, and would you introduce me or let me use your name?
- Record the map. Name, role, force, status, last touch, next step — in the CRM, against the account, updated at every stage.
4. Win the guardian first
The security architect is where network operations deals stall, and where the best vendors win. The reason is simple: every vendor in this category has to answer the same four questions — what do you touch, what leaves our environment, where does it run, who sees it — and most answer them in week six of a pilot, after the guardian has already said no. The program answers them in the first week of the sequence, before the guardian has been asked.
The posture that wins:
- Read-only first. The product discovers and recommends with evidence; it changes nothing until the buyer says so.
- Scoped, revocable credentials, brokered from the privileged-access tool the buyer already runs where they have one, so the vendor holds no standing device credentials.
- Execution only of runbooks the buyer approved, behind a confirmation, with an execution record an auditor can read.
- A data-flow diagram and a security packet delivered before they are requested, with anything still in process labelled as such.
- Autonomy as a dial the buyer holds, expanding only as they approve it and revocable in a minute.
In the language of the Seven C’s, this is the Key Move for the Critic: surface their concern early, treat it as legitimate, and answer it with specificity. The goal is not to win the argument. The goal is to remove their ability to stall the decision. A guardian engaged in week one is routinely the Champion by the readout, because they are the person in the room who can say “I checked.”
5. Earn the Economic Buyer by day thirty
The leader is the Economic Buyer in a mid-market deal and the sponsor in an enterprise one, where the CIO or CTO funds anything above the leader’s discretionary limit. Either way the rule is the same: the person who can sign is identified during research, reached by day thirty of the opportunity, and named in the pilot plan before the pilot starts. No Economic Buyer, no pilot. The operators want it; the leader is interested; nobody with budget has heard the story. That is not a pilot. That is a science project the vendor funds.
Two practical moves. First, a founder’s note on day sixteen of the extended sequence — three sentences from the CEO to the leader, asking for a candid reaction and giving permission to say the company has it wrong. Second, a twenty-minute executive conversation before any pilot proposal, framed as “what we expect to miss as well as hit.” Executives trust a vendor that volunteers its misses.
6. The warm path, and the MSP variant
Before any cold sequence to a top-tier account, the research brief checks for a warm path: an investor, a board member, a former colleague, a partner, a customer, a conference connection. A warm introduction converts to a meeting at several times the rate of a cold sequence and arrives with a Coach attached — someone who will explain how decisions get made even if they are not personally invested in your win. The forwardable note is written to be sent on without editing, and every conversation ends with the same referral ask: two people who run a multi-vendor network with a team smaller than the problem.
Managed service providers invert the committee. The practice owner is the Economic Buyer, the senior engineers are the operators and the architects at once, and the Critic is often the customer’s security team rather than the MSP’s own. The hook changes accordingly — senior capacity across tenants, evidence for the SLA review — and the pilot runs on two or three customer networks rather than one.
7. The deal-force check at the end of every call
Reaching the committee is the beginning of Consensus, not the end of it. After every discovery call the program scores the eight forces green, amber or red: who is the Champion and have they agreed to carry it; who is the Critic and has their concern been heard first-hand; what are the alternatives including doing nothing; is there a dated Compelling Event; have operations, architecture and security agreed an evaluation is worth their hours; is the price model and deployment acceptable; is there a buyer-owned next step with a date; and is the Economic Buyer named and engaged. A pilot is proposed at five green with the Compelling Event dated. A forecast commit needs seven. The check takes ten minutes and it is the difference between a pipeline and a list of meetings.
The Seven C’s Outreach Program™
Targeting, signals, the committee, the message spine, five channels, the deal-force check and the proof of value — built with your team and handed over.
See the program »The Seven C’s of Selling™
The seven forces that decide whether a complex deal closes, and when — plus the Economic Buyer who funds it.
Read the framework »Questions this piece answers
Who is on the buying committee for network operations software?
Six roles under different titles: the operator (NOC manager, senior network engineer), the leader (Director of Network Engineering or Operations, VP Infrastructure & Operations), the architect (network architect, automation or platform lead), the guardian (CISO, security architect, risk and compliance), the executive (CIO, CTO, COO) and the gatekeepers (procurement, vendor risk, legal). For a managed service provider, add the practice owner.
How many people should you contact at one account?
Three, in parallel, staggered a day apart: the operator hooked on the incident pattern, the leader hooked on the signal and its cost, and the guardian or architect hooked on access, evidence and standards. One reply pauses the other two threads for five business days; a meeting pauses them until it has happened.
How do you handle the CISO who says no vendor touches the network?
Agree with the policy and design for it: read-only first, scoped and revocable credentials brokered from the privileged-access tool they already run, recommendations with evidence, execution only of runbooks they approve behind a confirmation with an execution record. Then send the security packet before they ask for it. The guardian who is engaged in week one is a Champion by the readout.
Part of the outreach series for companies selling into AIOps and network operations: Signal-Based Outbound for Network Operations, this piece, Close the Loop, Don’t Break Up, Infrastructure Buyers Have Heard “AIOps” Before, Proof of Value That Converts and Operator Edition No. 05: The Outbound Agent Mandate.
Discovery and qualification
One of the five stages of the Revenue Foundation. Every piece for this stage, in order, is on the Field Guide.
Open »The Seven C’s Outreach Program™
The committee map, the three-contact rule and the deal-force check are three parts of one motion — built with you, handed over to your team.
See the program »New essays and operator tools, as they publish.
A few times a month, by email. No list is sold or shared; one click to leave.