I recieved a referral early on into my Cybersecurity career for a HIPPA-regulated entity who themselves were in industry for well over 5 years. Part of the value-add that I provided (separate from cyber-related security) was regulatory (i.e.: compliance) peace of mind. 

Prior to our engagement, they were completely unawares of HIPAA's annual risk-assessment requirement, which is at once technical and tedious to successfully navigate for practices with limited IT or no cyber talent. Much less one establishing a cybersecurity program for the very first time; this, if not properly and progressively supported, could have resulted in massive overwhelm.

My being able to first baseline and normalize their immediate cybersecurity needs operationally while streamlining this important regulatory event into their day-to-day activity, provided them added value, greater industry insights, and compliance-related peace of mind.

They have not looked over their shoulder (or back) since.