Stop Running Your Own QBRs. Start Running a Referral Engine.
June 10, 2026

Stop Running Your Own QBRs. Start Running a Referral Engine.

Your calendar is blocked every quarter.

Every client. Every meeting. You prep the data, you run the agenda, you handle the hard questions, you close the next quarter's date, and you leave having spent three hours doing something that only you can do.

That last part is the problem.

A QBR that only you can run is a QBR that can't scale. It's a meeting that depends on your availability, your prep time, and your ability to show up focused for every client every quarter. At 15 clients that's manageable. At 40 it's a part-time job on top of the business you're supposed to be running. At 60 it's impossible and you already know it.

But here's what makes this worse than just a calendar problem.

Every QBR you run personally is a referral opportunity you're too busy to take. Every meeting where you're presenting patch data and reviewing ticket trends is a strategic conversation that isn't happening because you're in presenter mode instead of advisor mode. And every client relationship that only runs through you is a relationship one resignation or one bad quarter away from being fragile.

You built something worth protecting. The QBR system is how you protect it and grow it at the same time. But only if you build it right. And building it right means getting yourself out of it.

THE MATH NOBODY RUNS

Here's the number worth thinking about.

If you run QBRs for 40 clients and each one takes three hours of prep and two hours of meeting time, you're spending 200 hours a year sitting in QBRs. That's five full work weeks. Every year. Just in QBRs.

Now ask what those five weeks cost in terms of what you didn't do. The strategic conversations you didn't have. The new clients you didn't pursue. The systems you didn't build. The team you didn't develop.

And then ask what those 40 QBRs produced in terms of referrals.

For most owners the answer is occasional. Maybe one or two a year if a client mentioned something. Nothing systematic. Nothing reliable. Nothing that compounds.

That's 200 hours producing occasional referrals when it should be producing three qualified leads per meeting, every quarter, all year.

That gap isn't a relationship problem. It's a system problem. And it's sitting in your most valuable client touchpoint right now.

THE SHADOWING PROCESS THAT ACTUALLY WORKS

The reason most owners never hand off their QBRs is the same reason they never hand off anything important. They tried once, it didn't go well, and they decided nobody can do it as well as they can.

That's not wrong. It's just the wrong conclusion.

Nobody can do it as well as you on day one. That's not the standard. The standard is whether someone can do it as well as you after a structured transfer process. And with the right process, they don't just match you. They beat you. Because they have one job and that job is this meeting. You have forty.

Here's the process that works.

Phase one is shadow. Your account manager or vCSO attends three consecutive QBRs with you running them. Not passively sitting in the back. Actively observing with a checklist. How you open the meeting and set the tone. How you move from data to conversation. How you handle a client who pushes back on a recommendation. How you close and lock the next date. How you make the client feel protected without making them feel scared. After each meeting you debrief for 20 minutes. What worked. What they noticed. What they'd do differently. The standard gets defined through the observation, not through a document.

Phase two is lead with you present. Your account manager runs the next two QBRs with you in the room and your mouth closed. Your job is to observe and take notes. Not to rescue. Not to jump in when there's a pause. If it gets uncomfortable, let it be uncomfortable. That discomfort is where they learn the most. After each meeting you debrief again. They tell you what felt off. You tell them what you noticed. The gaps get smaller.

Phase three is lead alone. They run it. Within 24 hours they send you a debrief: what was covered, what the client's concerns were, what action items were set, any flags that need your attention. You stay informed without being present. You review the first three solo meetings closely. Then you step back further. By meeting six they're not thinking about the transfer anymore. They're just running the meeting.

By the end of phase three your client has had five consistent QBR experiences with the same person. The relationship has transferred. The standard hasn't dropped. And your calendar has five weeks back in it every year.

THE REFERRAL MOMENT EVERY QBR HAS

Here's the thing about referrals that most owners get wrong.

They treat the referral ask as something that happens at the end of a good meeting when the client is in a good mood and it feels natural to bring it up. That's why referrals are occasional. Because good moods are occasional and natural moments are unpredictable and "feel free to refer anyone you think of" produces exactly nothing.

The referral moment isn't at the end of the meeting. It's in the middle. And it's specific.

Every QBR has a moment where the client feels protected. Where you show them something you caught, something you fixed, something you prevented. The patch that was 60 days overdue on a machine that had vendor access to their financial system. The alert that triggered at 2am that your team caught before it became an incident. The configuration change that closed an exposure they didn't know they had.

That moment, right there, is when you ask.

Not "do you know anyone who needs IT support." That's a vague ask that puts the client in the uncomfortable position of trying to figure out who in their network needs IT support.

Three specific leads. Security focused. Supply chain focused.

Here's the language: "We protect companies in your space from exactly this. Vendor access vulnerabilities like the one we closed for you in February are showing up everywhere right now. We'd like to have that same conversation with three other companies you know before something happens to them. It doesn't have to be a formal referral. Just an introduction. Who comes to mind?"

Read that again.

You're not asking them to sell your services to their friends. You're asking them to protect their friends from something they know is real because they just lived it. That's a fundamentally different ask and it produces a fundamentally different response.

The client who just watched you close a vendor access vulnerability doesn't feel like they're doing you a favor by referring someone. They feel like they're doing their colleague a favor. You're the mechanism. The protection is the point.

THREE LEADS. SECURITY FOCUSED. EVERY TIME.

The reason this works right now and why it's working better than it has in years is supply chain security.

Every SMB client you have has vendor relationships. Software vendors with API access. Service providers with remote access. Contractors with credentials that were handed out and never revoked. And every one of those vendors is a potential entry point for something that takes their business down.

Your clients know this. They've read the headlines. They've had the conversation at their industry association. They know someone who got hit through a vendor they trusted.

What they don't know is whether their peers have someone doing for them what you're doing for your client.

That's the ask. Not "do you know anyone who needs managed IT." That ask is 2015. The ask that works right now is: "Your vendor in Ohio has credentials into three of your systems. We audited that in February and locked it down. Your competitor two miles away probably hasn't done this yet. We'd like to talk to them before something happens. Who's the right person to introduce us to?"

That's not a sales pitch. That's a protective act. And the client who just watched you protect them is the exact right person to make that introduction.

Three leads per QBR. Security focused. Supply chain specific. Built into the agenda at the moment the client feels most protected.

If you run 40 QBRs a year and you ask for three leads at every one and you close 20 percent of the introductions you get, you know what your referral pipeline looks like. You know what your growth rate looks like without a single cold call.

That's the system. Built into the QBR. Running every quarter. Compounding every year.

WHAT HAPPENS WHEN YOU SCALE THIS

Here's what scaling this actually looks like.

Your account manager runs 40 QBRs this year instead of you. Each one follows the documented talk track. Each one hits the referral moment at the right time with the right language. Each one asks for three leads focused on vendor access and supply chain security. Each one closes with a scheduled next quarter date and a documented action item list.

You get a 24-hour debrief after each one. You review flags. You handle escalations. You stay connected to the client relationships without being in every meeting.

And at the end of the year you have 40 QBRs that produced consistent client experiences, a referral pipeline built on security conversations your clients were already having, and five weeks of your time back to spend on the business instead of in it.

That's not a hope. That's a system. And the difference between a hope and a system is documentation.

WHERE YOUR FIELD GUIDE COMES IN

Every piece of this lives in your field guide's QBR system section.

The talk track. How the meeting opens. How it moves through reporting. How it transitions from data to conversation. How the referral moment gets created and the ask gets made. How the meeting closes and the next date gets locked. Written specifically enough that your account manager can run it the first time without calling you.

The referral language. Word for word. Not a framework. The actual sentences. The three-lead ask. The supply chain framing. The language that makes the client feel like they're protecting a colleague instead of doing you a favor. Documented so every person who runs a QBR uses the same language and the referral results are consistent instead of dependent on whoever happens to be having a good day.

The shadowing protocol. The three phases. The observation checklist. The debrief structure. The criteria for moving from phase to phase. When it's in the field guide, onboarding the next account manager into QBR ownership takes weeks, not months. The transfer process has a standard. The standard produces the outcome.

The supply chain security review section. What gets audited each quarter. How vulnerabilities get presented to the client without creating panic. How the work you've done gets connected to the protection the client feels. This is the section that creates the referral moment. It doesn't happen by accident. It happens because the agenda was built to produce it.

When all four pieces are in the field guide, the QBR system runs without you. You built a system specific enough to be followed, documented well enough to be taught, and structured to produce referrals every single time. That is the difference.

The QBR you can't hand off isn't a strength. It's a ceiling.

It caps how many clients you can serve well. It caps how many referrals you can generate. It caps how much of your time goes toward building the business versus running it. And it means that every quarter, for the rest of the time you own this business, you're in rooms presenting patch data when you should be thinking about what comes next.

The QBR you can hand off is a growth engine.

It runs on your standard without you in the room. It produces referrals on a schedule instead of when you happen to remember to ask. It scales with your client count instead of breaking under it. And it compounds. Every lead generated at a QBR becomes a client who eventually has their own QBR where someone asks for three more leads.

That's the business you're building. The one that runs without you. The one that grows without you selling every deal personally. The one where your best client relationships produce your next best client relationships because the system was built to make that happen.

Your field guide is where you build it. The QBR system section is one of the highest-leverage sections in the entire document. Because that's the moment your clients feel most protected, most valued, and most likely to introduce you to someone who needs the same thing.

Build the system. Document the language. Run the shadowing process. Ask for three leads every time.

Start at builttorunmsp.com

FREQUENTLY ASKED QUESTIONS

How do you hand off QBRs without losing the client relationship?

The shadowing process transfers the relationship without breaking it. Three phases: the new owner observes three QBRs with you running them and uses a structured checklist to learn how you open, transition, handle pushback, and close. Then they run two QBRs with you present but silent. Then they run alone and send you a 24-hour debrief. By the fifth meeting the client has had a consistent experience with the new owner and the relationship has transferred. The key isn't rescuing them during phase two. That discomfort is where the real learning happens and where the ownership actually shifts.

How do you ask for referrals in a QBR without it feeling like a sales pitch?

The referral ask works when it comes at the moment the client feels most protected, not at the end of the meeting when you're wrapping up. Show them something you caught or fixed, then ask for three specific leads focused on the same vulnerability. The language matters. You're not asking them to recommend your IT services. You're asking them to protect someone they know from something they just experienced. "We'd like to have this same conversation with three companies you know before something happens to them" lands completely differently than "do you know anyone who needs IT support." One is a favor to you. The other is a favor to their colleague.

Why should QBR referral asks be focused on supply chain security?

Supply chain security is the conversation every SMB is already having. Vendor access vulnerabilities, third-party credentials, software with API access to sensitive systems. Your clients have read the headlines and they know someone in their industry who got hit through a trusted vendor. When you show them the vendor access work you've done for them and then ask for introductions to peers who probably haven't done that work yet, the ask connects to a fear that's already real. It's not a pitch for managed IT. It's a warning about something specific that your client's peers are exposed to right now. That context makes the introduction feel protective instead of promotional.

What should a documented QBR talk track include?

A complete QBR talk track has five sections. The open: how to set the tone and agenda in the first five minutes so the client feels this is a strategic conversation, not a report-out. The reporting section: which metrics get presented, how they get framed in terms of protection and progress rather than just numbers, and how to handle questions without getting pulled into a technical rabbit hole. The strategic conversation transition: the specific moment and language for moving from data to forward-looking discussion. The referral moment: when it happens in the meeting, exactly what gets said, and how to ask for three specific leads. The close: how to document action items, confirm the next quarter's date, and leave the client feeling more confident than when they walked in. When all five sections are documented with specific language, every account manager runs the same meeting regardless of their experience level.

How many referrals should a QBR system produce?

A well-built QBR system with a documented referral ask produces three introductions per meeting when executed consistently. Not all of those become leads and not all leads become clients, but at a 20 percent conversion rate on introductions, 40 QBRs a year produces a referral pipeline of 24 new clients annually without a single cold outreach. The compounding effect is what makes this valuable. Each referred client has their own QBR system running on the same standard, producing their own introductions each quarter. The referral pipeline grows with the client base instead of requiring a separate sales effort to maintain it.

About the author
Bruce McCully

Bruce McCully

Bruce McCully built his first company, an MSP, from zero to $8.5 million in recurring revenue. A significant part of that came from cybersecurity incident response. Going into hospitals at 2am and recovering them from ransomware attacks. He didn't learn what happens when a business is unprepared by reading a case study. He was in the room when it happened. Then he founded Galactic Advisors. He scaled it to eight figures in recurring revenue, then stepped down as CEO to focus on MSP Advancement full time. Not because he lost interest. Because the systems he built meant the company no longer needed him to operate it day to day. He remains Chairman of the Board and majority owner. And now he's doing the only thing he wanted to do all along: helping MSPs level up.