The Conference Follow-Up Campaign That Built a Cybersecurity Pipeline for School Districts

248 contacts. A three-week window. No follow-up system.

The conversations at CyberCon had gone well. The team from one of the largest independently owned business technology firms in the Southeast spent two days with Technology Directors, CIOs and Network Administrators from school districts across Georgia. The topic, cybersecurity for school systems, was exactly what those attendees came to discuss. Student data. Compliance reviews. IT teams stretched too thin to run proactive threat monitoring alongside everything else.

Getting into those conversations was the easy part. Building anything with them afterward was the hard part.

A week after the event, follow-up emails went out. They sounded like every other vendor email that lands in a school district IT leader's inbox after a conference. No mention of what was actually discussed. Nothing that reflected the pressure of running technology for twelve schools with a team of four. A generic thank-you and a link to a solutions page.

Meanwhile, marketing ran on general content: newsletters, blog posts and social posts that stayed active but were not organized around a specific buyer, a specific moment or a specific next step. The company knew how to show up at events. Turning those conversations into pipeline was a problem it had not solved.

Two things needed fixing

The first was structural. Marketing produced content without campaigns built around buyer moments or next steps. Blog posts went live and newsletters went out, and nothing was organized to move a specific conversation forward.

The second was vertical. The company had sold technology services to school districts for years, but marketing had never built anything for that buyer. School district IT leaders work under their own set of constraints: tight budgets, small teams, compliance obligations and purchasing timelines that look nothing like a commercial buyer's. Generic cybersecurity content missed them.

CyberCon created a concentrated entry point: 248 school district technology leaders in one place, gathered around one topic, at a moment when cybersecurity was front of mind across Georgia K-12. The event created warmth. Marketing had no mechanism to use it.

It got more complicated. The company has a large sales team with many people involved in the process. Agreeing on messaging, segmentation and send strategy meant coordinating stakeholders with different opinions about the list. Leadership had to be brought in, recommendations made and credibility put on the line before the first email went out.

There was no established post-event follow-up process. Every decision had to be made from scratch: who gets which message, in what order, through which channel, toward what goal. Building a system for the first time is slower than improving one, and the window of relevance was still open.

Two tracks, three emails, one landing page

The campaign ran in two layers: warm and cold.

Warm contacts had spoken directly with the team at CyberCon. Everyone else on the attendee list made up the cold side. Collapsing both into one list with one message was the predictable move, and it would have wasted the warmth the event created. Someone who talked with your team for twenty minutes needs a different opening than someone seeing your name for the first time.

One early decision shaped the warm results: the warm sequence went out from the rep's own email address. A contact who had a real conversation at CyberCon would recognize the name in their inbox. The cold sequence led with a problem reframe and ran from the company domain. Both sequences ran three emails over five weeks.

Email 1: the reframe. It reframed the gap between IT security and cybersecurity. Firewalls and antivirus keep systems running. A security posture assumes something will get through. The email showed that frame without arguing it.

Email 2: the visibility problem. Modern threats move laterally through school district networks for months before anything visible happens, while district IT teams manage devices across multiple buildings.

Email 3: the institutional shift. Compliance reviews. Insurance audits. Board-level accountability. One question: "Could you prove you are protected tomorrow?" For a Technology Director who answers to a superintendent and a school board, that question lands hard.

Every email pointed to a single landing page. The form gained an industry dropdown, so school district respondents were segmented automatically with no extra form and no manual tagging. A small operational decision that gave the sales team clean data from the first conversion.

Pipeline before the sequence finished, and engagement that climbed to the end

248 contacts entered the campaign in early April 2026. The 10 qualified leads came in before email three went out.

The warm sequence climbed with every email: 25.4%, then 33.3%, then 35.0%. In a typical post-event sequence, engagement drops with each send. When it climbs, people found a reason to come back.

The cold sequence finished at its highest open rate, 40.2%, on the institutional email. The question about proving protection to a board landed with people who had never spoken to the team.

What the sales team got: 10 qualified leads from a list that had no follow-up system two weeks earlier, a contact list sorted by relationship depth, and the security-posture reframe already delivered before the first sales conversation.

The same system, nine months running

CyberCon was one campaign inside a longer engagement. From December 2025 through August 2026, the same approach (a specific buyer, a specific moment, one next step) ran across the company's whole email and content program.

• 104,030 emails delivered across 26 sends from December 2025 through June 2026.
• One fix that changed the list. In May, more people were unsubscribing than clicking. In June, we stopped mailing people who had stopped opening. The next newsletter's open rate went from 16.8% to 29.0%, and the September send held at 33.8%.
• 747 form submissions in the CRM between December 2025 and September 2026.
• 156 of the 416 net-new form submitters (38%) had a marketing email touch before they converted, December through June.

One lesson came out of the numbers. Only one of those 747 submissions showed email as its last source, and 506 showed direct traffic. The outbound links carried no tracking tags, so the CRM filed those arrivals as direct. If you fix one thing before your next campaign, tag every outbound link.

The full story of the program, including the customer case study that helped close new business, is here: How a $100M business technology company turned its marketing into new customers.

Conference attendance creates warmth. The follow-up system decides whether it compounds.

Post-event follow-up usually goes out as a broadcast: one email, one message, one tone, sent to everyone on the list regardless of what happened at the event. That treats every contact the same and spends whatever warmth the event created.

For specialized buyers (school district IT leaders, healthcare administrators, legal technology officers), what moves a conversation forward is evidence that the sender understands their world. A Technology Director running cybersecurity for twelve schools knows within the first sentence whether that understanding is real.

The warm and cold split matters for the same reason. Contacts who had real conversations at CyberCon were already partway through a decision and needed a different message than contacts meeting the company for the first time.

Build the segmentation before the campaign runs, and the sales team inherits a warm list that has already been reframed.