Hourly Advisory

Senior security guidance when you need a specific question answered or a decision reviewed — without an ongoing commitment. Due diligence, vendor assessments, policy review, architecture questions.

$350/hour · $700 minimum engagement · 2-hour minimum

What's Included

  • Any security topic within scope of expertise
  • Written summary of recommendations upon request
  • Follow-up questions via email for 5 business days after session
Deliverables
Varies by engagement — discussed at booking. Written summary available on request.
Best For
Companies that need targeted guidance without an ongoing commitment. Due diligence reviews, vendor assessments, policy reviews, security architecture questions.
Request a 2-Hour Advisory Session

Frequently Asked Questions

What topics can be covered in an hourly advisory session?

Any topic within scope of expertise: vendor security assessments, security architecture review, due diligence for acquisitions or investments, policy review, SOC 2 or ISO 27001 questions, cloud security configuration, incident response guidance, or security questionnaire strategy. Sessions are unstructured — you bring the question.

Is there a minimum engagement for hourly advisory?

Yes. The minimum engagement is $700 for two hours at $350/hour. Jim confirms scope, timing, and any additional hours with you before work begins.

How quickly can I book an hourly advisory session?

Request an advisory session through the contact form and include your question and preferred timing. Jim will confirm availability, scope, and the two-hour minimum before scheduling.

When does it make sense to move from hourly advisory to a retainer?

If you find yourself booking advisory sessions regularly — monthly or more — the fractional CISO retainer provides ~20 hours/month at $8,500, which includes ongoing program ownership, planning, and reporting beyond individual advisory sessions.

Looking for more structured engagement? The Fractional CISO Retainer includes ~20 hours/month at $8,500 with ongoing program ownership and reporting.