Services & Pricing
Productized packages, not consulting hours.
Partners and administrators need to predict the expense and the timeline. Every offering below is a fixed-fee package, a per-seat license, or a monthly retainer. Annual billing, calendar-year-aligned by default.
Who runs this
Travis Barlow — 25+ years in incident response, 580+ engagements, founder of AtlSecCon.
AtlSecCon is one of Canada’s longest-running security conferences. No SDR, no junior associate — you talk to the person who’s run this incident before.
Prices in CAD
Three anchor tiers by firm size.
Solo & Small CA$10,500/yr · Mid-Size CA$25,500/yr · Regional from CA$51,000/yr.
Available add-ons
- IR Retainer — named on-call IR lead, SLAs, quarterly drill.CA$8,500 / year
- vCISO — ongoing security oversight. Learn more →from CA$1,800 / month
Prices in CAD. Annual billing, calendar-year-aligned by default.
What’s included
Four pillars, across every tier.
Risk assessment & client readiness
The hook pillar. Outside Counsel Guidelines responses are the wedge — a recurring, revenue-threatening event that pulls the firm into the full assessment.
- Firm Security Risk Assessment (CIS v8.1 / NIST CSF)
- Outside Counsel Guidelines & questionnaire response
- Written Information Security Program (WISP)
- Cyber & LPL insurance application support
- Trust-account wire-fraud control setup
Security awareness for legal staff
Generic phishing training fails legal staff. We use the lures legal staff actually see — wire-instruction changes, fake e-filing notices, opposing-counsel impersonation.
- Legal-staff awareness program
- Phishing simulation with legal-realistic lures
- Wire-fraud-specific staff training
- Practice-area add-ons (real estate, PI, estate, CJIS)
Incident response & breach readiness
Sold as a retainer because the value is in availability. Firms that buy IR after the wire has left pay far more and often miss the recall window.
- Named on-call IR lead with 2-hr business SLA
- Tabletop exercises tuned to firm systems
- Breach Readiness Pack (notification templates, runbooks)
- Opinion 483 notification guidance
Managed security / vCISO
Ongoing security oversight without an in-house hire. Monthly retainer with quarterly partner reviews and MSP coordination.
- Quarterly review with managing partner & MSP
- WISP kept current, OCG response support
- Management-committee briefings
- Vendor / co-counsel risk review
Free, always available
Triage is free.
If you think you have an incident — especially if money has just moved — the first call costs nothing.