Hello everyone!

Currently I work for a computer consulting firm that does a lot of network and systems maintainance and consulting (basically we act as their sys and network admins), as well as doing app. development stuff. I've approached my boss about adding network and systems security services to our marketing, but the problem is, how exactly does this fit in with existing and new clients. Basically I'm hoping to add the initial security evaluation and lockdown as a service within itself, and then simply keep the security "upkeep" so to speak with the existing portion of the consulting firm.

More likely than not they are going to ask why this isn't already part of our service, which is a legit question if we are talking about a brand new install, but it is impossible to fit general upkeep AND a baseline security analysis and lockdown into a client's monthly retainer (or number of hours "alloted" to the client on a per month basis). Plus I'm looking to branch this off into its own division with unique consulting services that I could possibly head once I graduate from school (Just a little bit of self interest).

Anyway, I was wondering if any of you had any advice on expanding to offer these services, or if you are already in security consulting, what kinds of services do you offer your clients?

Regards,
Wizeman