Putting together a business plan that would create a consultantcy that specializes in computer security for small businesses.

I figure having a niche like this would be better than trying to be an "we can do everything" company.

I have a background in being a sales engineer for 3 different software companies, but no certifications (just a college degree in business).

My question is first, is having a security company a viable concept and secondly, what certifications/experience would be the best to get (and from where?)

Thanks for any help.

jeffj