Cybersecurity consulting retainer model