I need all the information/direction on starting a "Small/Medium size
business Internet/Network Security consulting".  ISS.net already
provides this service for big companies but they do not scale to
smaller companies.
Specifically, here are the questions that I want answered:
1.  Is there a consulting company that already exists that focus on
the smaller business specific to Internet/Network Security?
(perhaps it may be a franchise or partnership)
2.  Obviously the best way of selling this service is to do an
"ethical hack" then provide them with the report.  Intuitively, I
think this is an  unwise and questionable way to market this service. 
 Are there any case studies?
3.  Although, I have a broad knowledge of Internet Security, perhaps
there's already an existing methodology (a cookbook).  For example,
the inclusion of Nessus (open-source application) for "scanning" as
part of the cookbook.