Why this segment and this angle
A 20 person law or accounting firm holds sensitive client data, runs on Microsoft 365 and usually has no IT person. Somebody in the firm signs the cyber insurance renewal form every year, and that form asks direct questions about logins, backups and former staff accounts. Most firms answer yes and hope it is true. If a claim ever comes, the difference between the form and reality is what an insurer looks at.
That gives you an offer that is useful on its own, a short check of the answers against the firm's actual setup. It is concrete, it fits in 30 minutes, and it leads naturally to the conversation about who looks after IT.
The market is large enough to be picky. When we counted it in September 2026, Argorant had about 87,000 owner-level contacts with business email at US law firms and about 73,000 at US accounting firms, before narrowing by size, technology or distance.
Step 1, who to target
MSPs sell locally, so start with distance. Pick your state under Location, then add the cities you can reach for an on-site visit in the City field. Run law and accounting as two separate campaigns, because the emails name the profession.
Industry Legal Services (campaign 1)
Accounting (campaign 2)
Employees 11-50
Technology Microsoft 365
Location your state, then the cities within
driving distance of your office
Job titles Managing Partner, Partner, Owner, Founder,
Office Manager, Practice Manager,
Firm Administrator, Operations Manager
Must have emailKeep the office and practice managers in. In firms this size they often own the IT relationship and fill in the insurance form, even if a partner signs it.
Leave out earlier lists with Leave out people from a list, and save each campaign's list with a name like MSP law 11-50 M365 40mi.
Step 2, timing
Do not write to accounting firms between February and mid April. They are buried in tax season and your email will read as noise. Load the accounting campaign for May to January and let the law campaign carry the spring.
Renewal months vary by firm, which is why the sequence asks for it. Every answer that includes a month is a dated follow-up you can set up by hand.
Step 3, the math
new people per week 250 (50 per weekday)
emails per person 3
emails per weekday ~150 once follow-ups overlap
per mailbox per day 5
mailboxes needed 30The mailbox math is the same as in the Academy lesson on mailboxes and limits. Our own Microsoft mailboxes are set to 5 cold emails a day each, and we would start any new segment there.
Within driving distance, the list may run out in a few months. That is fine. Add the next ring of cities, and keep the distance real, because being able to show up in person is part of the pitch.
Step 4, the sequence
Email 1, variant A
Subject {the insurance form|your cyber insurance renewal}
{Hi|Hello} {{first_name|there}},
When {{company|the firm}} renews its cyber insurance, the form asks whether every login uses multi-factor authentication and when the backups were last tested. Most small law firms we meet answer yes to both without being fully sure.
We look after IT for law firms around {{city|your area}}. In about 30 minutes we can check those answers against your actual Microsoft 365 setup, and you keep the notes either way.
Worth doing before your next renewal?
{{sender_first_name}}
For the accounting campaign, write "small accounting firms" in the second sentence and "accounting firms" in the third. Nothing else changes.
Email 1, variant B
Subject former staff logins
{Hi|Hello} {{first_name|there}},
Do you know how many active Microsoft 365 logins {{company|the firm}} has compared to people on payroll?
In small firms the two numbers rarely match. Accounts of people who left stay open for months, and those are the ones insurers and attackers both care about. We check this for law firms around {{city|your area}} in about 30 minutes.
{{sender_first_name}}
Variant B opens with a question the reader cannot answer from memory, which is the point. Test it against A and keep the winner.
Email 2, four days later, same thread
{{first_name|Hi}}, when does the firm's cyber insurance renew? If it is a few months out, I can get back to you closer to the date instead.
{{sender_first_name}}
One question, easy to answer, and every answer with a month in it is useful even when it is not a yes.
Email 3, five days after that, same thread
Last one from me. If IT is covered by someone you are happy with, no need to reply.
If you would like the check anyway, reply with "check" and I will send two times that work this week.
{{sender_first_name}}
The one-word reply matches a keyword in the subsequence below, so a "check" at 9 pm gets times within the next sending window.
Step 5, the subsequence for yes
Add one subsequence called Interested. Keywords are check, yes, interested, sounds good, sure, book, call, happy to, when, renewal. First email in the next sending window.
Subject Re: {{thread_subject}}
Good. It takes about 30 minutes on a screen share with whoever has admin access to Microsoft 365, and we go through the renewal questions one by one.
Would {Tuesday|Wednesday} at 10 or Thursday at 2 work? If neither does, send me a time that suits you.
{{sender_first_name}}
{{first_name|Hi}}, if it is easier, send me last year's renewal form and I will mark the questions worth checking before we talk.
{{sender_first_name}}
Set the second email two days after the reply. Most people who said yes and went quiet were just busy.
Step 6, reply handling
- "We have an IT company." Expected for half of them. Answer that the check is independent of who runs IT and is often useful as a second pair of eyes. Then let it go.
- "Our renewal is in March." Thank them, set the label to Other and put a reminder in for six weeks before. That is a warm email later.
- "Talk to our office manager." Write to them the same day and mention the partner who sent you.
- "Is this a sales pitch?" Say yes, plainly. You run IT for firms like theirs, the check is free, and they keep the notes. People respect a straight answer.
- "Remove me." The Unsubscribe label catches it.
What to watch
This audience reads email carefully and answers slowly, so give each campaign two full weeks before judging it. If many replies say they already have an IT company, the angle is landing but the offer needs a softer second step. If replies are near zero, check delivery first, then try variant B as the only first email.
For reference, our own healthiest campaign reached a 3.5% reply rate per person contacted, out-of-office notices included, with 0.05% bounces, sent from mailboxes at 5 cold emails a day to a valid-only list. That was a different segment and offer, so treat it as a sanity check, not a target. The lesson on reading the numbers says which change to make for which result.
