Let's have a conversation.

A strategy session is a 30-minute conversation — no slides, no demos, no pitch. We'll ask about your organization, your sector, and the security or privacy challenges you're facing. By the end, you'll have a clear sense of whether Fractional CISO advisory, security architecture review, or privacy advisory is the right starting point — and we'll have a clear sense of whether we're the right fit for each other. If we're not, we'll tell you.

Yes. While most of our engagements are with Ontario and Canadian organizations, we have provided advisory services to US-based clients and have experience advising on GDPR obligations for Canadian organizations with international exposure. Geography is not a barrier — most advisory work is delivered remotely.

Our deepest experience is in financial services (credit unions, banks), insurance, public transit and operational technology, government, and retail. That said, the advisory approach — business-aligned security and privacy programs — applies across sectors. If your sector isn't listed here, a 30-minute conversation will quickly establish whether we're the right fit. View our full engagement history →

Not in our own name at present. Our public-sector engagements have been delivered through prime contractors holding vendor-of-record or supply-arrangement status, and that remains the usual route: if your organization buys through a VOR, we can be proposed as a named resource by a prime already on it. Smaller scopes may be contracted directly within your procurement rules. Goni Sarakinov holds Government of Canada Reliability Status, and screening details can be provided for specific bids. Prime contractors interested in teaming are welcome to get in touch. How public-sector work is contracted →

All engagements are independent advisory arrangements — we provide guidance, frameworks, and recommendations, and your organization retains full decision-making authority and accountability. There are three tiers: Essentials for light-touch senior oversight, Strategic Advisory for ongoing guidance and roadmap oversight, and Active Advisory for more intensive program support, audit preparation and supplier risk management. Fees start at $3,000 a month (CAD + HST). Every tier is month-to-month with 30 days' notice and no onboarding fee, with savings of 5%, 10% or 15% on a 3-, 6- or 12-month term. If you'd rather start with a defined project, the Security Program Baseline is a fixed-fee, 3–4 week assessment. Learn more about Fractional CISO Advisory →

No. Sarakinov Consulting is an independent advisory practice — we have no product affiliations or reseller arrangements, and no managed services of our own to upsell. Where we have delivered work in partnership with a managed service provider, our advice has stayed independent of their offerings. When we recommend a technology or solution, it is because it is the right fit for your specific context, not because we have a financial interest in you purchasing it. This independence is one of the most important things we offer.

Client confidentiality is a non-negotiable. We do not identify clients publicly without explicit permission, and we describe our engagement history using anonymized sector descriptors. All engagements are governed by confidentiality provisions, and sensitive information is handled in accordance with our privacy policy and applicable legislation. If you have specific confidentiality requirements, we're happy to discuss them before an engagement begins.

For most engagements: initial strategy session (30 minutes), followed by a proposal if there's a clear fit (typically within 5 business days), followed by engagement documentation and kickoff. From first contact to engagement start is typically two to four weeks, depending on your organization's internal process. If you have a specific timeline or deadline driving the enquiry, let us know in your message or session — we can usually accommodate urgency.