Navigating Price Pressure and Thin Margins in Incident Response

Featuring Michael Bohner, Director of Product at iCONECT, and Kevin Johnson, CISM, Veil Group

Carrier-driven budgets have become the ceiling on incident response pricing, not the starting point. Standardized playbooks compress what the market will pay, and when a fixed fee gets set before a matter’s scope is understood, the provider absorbs whatever the initial assessment missed.

According to IBM’s Cost of a Data Breach Report, the average U.S. breach cost climbed to $11.5 million in 2026, up 11% from the year before. That pressure hits providers and legal teams from different angles, but it starts in the same place: scoping work before setting the price.

Watch this on-demand conversation between Michael Bohner and Kevin Johnson on where fixed-fee engagements break down, and where disciplined scoping protects margin and defensibility.

Here’s what you will learn:

  • Why fixed-fee incident response engagements break down and the scoping habits that prevent it
  • Where AI protects margin in incident response today, and where it adds cost without adding defensibility
  • The early warning signs that an engagement is losing ground in the first 48 hours
  • How to frame the value of discipline scoping for clients as risk reduction, not just cost reduction

Fill out the form below to access the video.


Make your next move the right move

Take the first step toward better data response, governance or eDiscovery with iCONECT.

Related resources

Breach Response Playbook

iCONECT and eDiscovery AI logos stacked with an "x" between them, representing their partnership on AI-powered document review

iCONECT and eDiscovery AI Partner to Build Integrated AI-Powered Document Review Experience

How Dispute Analysis Group Uses iCONECT to Integrate Discovery Into Legal Strategy