Great discussion today with a colleague and respected friend.
We can develop a useful risk management site with tools and guidance that people can use, without the cost of a consulting or public accounting firm. There is no mistique in risk management.
We can also provide direction on what companies should be paying for consulting services in risk management, internal audit, IT audit...Yes, there is a wide range of fee structures out there within and between the firms. It doesn't need to be a secret as to what companies are or should be paying.