Cookies are small files that websites can use to make a user’s experience more efficient. The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we need your permission.

We only use necessary cookies. 

When you log on to our website for the first time, a message will appear about our use of Cookies, with a link to further details about the types of Cookies used, as well as a link to our full Cookies Policy. All Cookies used by and on Our Site are used in accordance with current Law.

Learn more about who we are, how you can contact us and how we process personal data in our Privacy Policy.

This applies to the following domains: bhhaven.com

Necessary 

Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

NameProviderPurposeMaximum Storage Duration
__cf_bm CloudflareThis cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website.30 Min
cmplz_consented_servicesComplianz CMPUsed to store cookie consent preferences.1 year
cmplz_policy_idCompliaz CMPUsed to store accepted cookie policy ID1 year
cmplz_marketingCompliaz CMPUse to store cookie consent preferences 1 year
cmplz_statisticsComplianz CMPUse to store cookie consent preferences1 year
cmplz_preferencesComplianz CMPUse to store cookie consent preferences1 year
cmplz_functionalComplianz CMPUsed to store cookie consent preferences1 year
cmplz_banner-statusComplianz CMPUse to store if the cookie banner has been dismissed1 year
Compare key inclusionsView full comparison
Tier Sizing & Support
ServiceFoundationStandardProfessionalScale
Typical company size1–1010–5051–150151–250
Consulting days available261224
Governance & Strategic Advisory
ServiceFoundationStandardProfessionalScale
Virtual CISO advisoryQuarterlyQuarterlyQuarterlyQuarterly
Virtual Data Protection advisoryQuarterlyQuarterlyQuarterlyQuarterly
Virtual AI Officer advisoryQuarterlyQuarterlyQuarterlyQuarterly
Board presentation——AnnualTwice yearly
Board awareness / cyber-literacy training——AnnualTwice yearly
Key industry developments briefingAnnualAnnualTwice yearlyQuarterly
Compliance & security posture dashboardAnnualAnnualTwice yearlyQuarterly
Customer Trust Pack✓✓✓✓
Customer security questionnaire supportUp to 1/yearUp to 2/yearUp to 4/yearUp to 10/year
Executive reporting———Monthly
Cybersecurity — Core Assurance
ServiceFoundationStandardProfessionalScale
Cybersecurity Maturity AssessmentLite✓✓✓
Cybersecurity Risk Assessment✓✓✓✓
Cybersecurity Risk Register✓✓✓✓
Cybersecurity PoliciesTemplatedTailoredTailoredTailored
Third-Party Vendor Risk Register✓✓✓✓
Third-party vendor exposure analysis✓✓3/year3/year
Supplier onboarding security pack——✓✓
Backup & Restore posture review✓✓✓✓
Backup / DR tabletop exercise——AnnualAnnual
Backup & restore / ransomware recovery exercise———Annual
Identity & Access Management review✓✓✓✓
MFA & privileged-access governance—✓✓✓
Endpoint / EDR posture reviewAnnualAnnualTwice yearlyQuarterly
Dark web / credential monitoring✓✓✓✓
Firewall Security Assessment✓✓✓✓
Technical Testing & Exposure Management
ServiceFoundationStandardProfessionalScale
Vulnerability Assessment1 item/year2 items/year4 items/year4 items/year
External attack-surface monitoring✓✓✓✓
Penetration testing——1/year2/year
Microsoft 365 / Google exposure review✓✓✓✓
Microsoft 365 / Google Workspace Security Assessment✓✓✓✓
Cloud Security Posture Assessment——1/year2/year
Active Directory / Entra ID review✓✓✓✓
Simulated phishing testAnnualTwice yearlyQuarterlyQuarterly
Company & employee OSINT footprint✓✓✓✓
Domain & subdomain security✓✓✓✓
DNS / certificate / CA misconfiguration checks✓✓✓✓
Impersonation & brand protection – DMARC/SPF/DKIM✓✓✓✓
Exposed management interface checks✓✓✓✓
Public secrets exposure search✓✓✓✓
Awareness, Training & People
ServiceFoundationStandardProfessionalScale
Online Security Awareness Training platform✓✓✓✓
Staff awareness newsletter✓✓✓✓
Managed Cybersecurity Awareness Programme——✓✓
Lunch & Learn awareness sessions——1/year2/year
Role-based training – Developers, Finance, HR etc.——1 role/year2 roles/year
AI literacy / staff AI awareness training——✓✓
Incident Response & Resilience
ServiceFoundationStandardProfessionalScale
Incident Response & Data Breach PoliciesTemplatedTailoredTailoredTailored
Incident Response advisory support – business hoursAdd-onUp to 8 hrsUp to 16 hrsUp to 24 hrs
Incident Response runbooks12510
Incident Response Tabletop Exercise——AnnualTwice yearly
Breach notification drafting templates – DPC/ICOTemplated✓✓✓
Breach notification workflow & regulator communications playbook——✓✓
Cyber Resilience & Business Continuity Plan——Annual reviewFull plan
Certification & Regulatory Compliance Readiness
ServiceFoundationStandardProfessionalScale
Cyber Essentials readiness & certification supportAdd-on✓✓✓
Cyber Essentials Plus readiness*Add-onAdd-on✓✓
Cyber Fundamentals alignment*Add-on✓✓✓
ISO 27001 alignment / gap analysisAdd-onAdd-on✓✓
ISO 27001 certification readiness*Add-onAdd-onAdd-on✓
SOC 2 readiness*Add-onAdd-onAdd-on✓
NIS2 / Cyber Security and Resilience Bill scoping & gap analysisAdd-onAdd-on✓✓
DORA / FCA Rules readiness – financial services*Add-onAdd-on✓✓
Other regulatory gap analysisAdd-onAdd-onAdd-onAdd-on
Readiness and alignment services support organisations in preparing for applicable standards, regulations, and certification schemes. BH Haven does not guarantee regulatory compliance or certification.
Cyber Insurance Support
ServiceFoundationStandardProfessionalScale
Cyber Insurance readiness assessment—1/year1/year1/year
Cyber Insurance renewal assistance—✓✓✓
PCI DSS — Where Applicable
ServiceFoundationStandardProfessionalScale
PCI Self-Assessment Questionnaire support✓✓✓✓
PCI DSS Assessment——✓✓
PCI Vulnerability Scan———✓
GDPR / Data Protection
ServiceFoundationStandardProfessionalScale
GDPR / Data Protection Gap AnalysisLite✓✓✓
GDPR / Data Protection PoliciesTemplatedTailoredTailoredTailored
ROPA development & review✓✓✓✓
ROPA annual maintenance—✓✓✓
DPIA support1/year2/yearUp to 5/yearUp to 10/year
Transfer Impact AssessmentAdd-onAdd-onUp to 2/yearUp to 4/year
DSAR & data-subject rights procedureTemplatedTailoredTailoredTailored
Data retention & deletion process development——✓✓
Cookie scan✓✓✓✓
Website Privacy Notice review✓✓✓✓
GDPR training✓✓✓✓
AI Governance
ServiceFoundationStandardProfessionalScale
AI AssessmentLite✓✓✓
AI PoliciesTemplatedTailoredTailoredTailored
AI inventory & shadow-AI discovery——✓✓
AI Awareness Training✓✓✓✓
EU AI Act risk classification1 system/year✓✓✓
ISO 42001 alignment / gap analysis——Add-on✓
Sector-Specific Bolt-Ons
Optional serviceFoundationStandardProfessionalScale
FinTech – CBI/FCA outsourcing & operational resilienceAdd-onAdd-onAdd-onAdd-on
Healthcare – HSE/NHS supplier assurance packAdd-onAdd-onAdd-onAdd-on
Charity – OSCR/Charity Commission data-handling guidanceAdd-onAdd-onAdd-onAdd-on
SaaS/Technology – Customer due-diligence packAdd-onAdd-onAdd-onAdd-on
Compare key inclusionsView full comparison
Tier Sizing & Support
ServiceFoundationStandardProfessionalScale
Typical company size1–1010–5051–150151–250
Consulting days available261224
Governance & Strategic Advisory
ServiceFoundationStandardProfessionalScale
Virtual CISO advisoryQuarterlyQuarterlyQuarterlyQuarterly
Virtual Data Protection advisoryQuarterlyQuarterlyQuarterlyQuarterly
Virtual AI Officer advisoryQuarterlyQuarterlyQuarterlyQuarterly
Board presentation——AnnualTwice yearly
Board awareness / cyber-literacy training——AnnualTwice yearly
Key industry developments briefingAnnualAnnualTwice yearlyQuarterly
Compliance & security posture dashboardAnnualAnnualTwice yearlyQuarterly
Customer Trust Pack✓✓✓✓
Customer security questionnaire supportUp to 1/yearUp to 2/yearUp to 4/yearUp to 10/year
Executive reporting———Monthly
Cybersecurity — Core Assurance
ServiceFoundationStandardProfessionalScale
Cybersecurity Maturity AssessmentLite✓✓✓
Cybersecurity Risk Assessment✓✓✓✓
Cybersecurity Risk Register✓✓✓✓
Cybersecurity PoliciesTemplatedTailoredTailoredTailored
Third-Party Vendor Risk Register✓✓✓✓
Third-party vendor exposure analysis✓✓3/year3/year
Supplier onboarding security pack——✓✓
Backup & Restore posture review✓✓✓✓
Backup / DR tabletop exercise——AnnualAnnual
Backup & restore / ransomware recovery exercise———Annual
Identity & Access Management review✓✓✓✓
MFA & privileged-access governance—✓✓✓
Endpoint / EDR posture reviewAnnualAnnualTwice yearlyQuarterly
Dark web / credential monitoring✓✓✓✓
Firewall Security Assessment✓✓✓✓
Technical Testing & Exposure Management
ServiceFoundationStandardProfessionalScale
Vulnerability Assessment1 item/year2 items/year4 items/year4 items/year
External attack-surface monitoring✓✓✓✓
Penetration testing——1/year2/year
Microsoft 365 / Google exposure review✓✓✓✓
Microsoft 365 / Google Workspace Security Assessment✓✓✓✓
Cloud Security Posture Assessment——1/year2/year
Active Directory / Entra ID review✓✓✓✓
Simulated phishing testAnnualTwice yearlyQuarterlyQuarterly
Company & employee OSINT footprint✓✓✓✓
Domain & subdomain security✓✓✓✓
DNS / certificate / CA misconfiguration checks✓✓✓✓
Impersonation & brand protection – DMARC/SPF/DKIM✓✓✓✓
Exposed management interface checks✓✓✓✓
Public secrets exposure search✓✓✓✓
Awareness, Training & People
ServiceFoundationStandardProfessionalScale
Online Security Awareness Training platform✓✓✓✓
Staff awareness newsletter✓✓✓✓
Managed Cybersecurity Awareness Programme——✓✓
Lunch & Learn awareness sessions——1/year2/year
Role-based training – Developers, Finance, HR etc.——1 role/year2 roles/year
AI literacy / staff AI awareness training——✓✓
Incident Response & Resilience
ServiceFoundationStandardProfessionalScale
Incident Response & Data Breach PoliciesTemplatedTailoredTailoredTailored
Incident Response advisory support – business hoursAdd-onUp to 8 hrsUp to 16 hrsUp to 24 hrs
Incident Response runbooks12510
Incident Response Tabletop Exercise——AnnualTwice yearly
Breach notification drafting templates – DPC/ICOTemplated✓✓✓
Breach notification workflow & regulator communications playbook——✓✓
Cyber Resilience & Business Continuity Plan——Annual reviewFull plan
Certification & Regulatory Compliance Readiness
ServiceFoundationStandardProfessionalScale
Cyber Essentials readiness & certification supportAdd-on✓✓✓
Cyber Essentials Plus readiness*Add-onAdd-on✓✓
Cyber Fundamentals alignment*Add-on✓✓✓
ISO 27001 alignment / gap analysisAdd-onAdd-on✓✓
ISO 27001 certification readiness*Add-onAdd-onAdd-on✓
SOC 2 readiness*Add-onAdd-onAdd-on✓
NIS2 / Cyber Security and Resilience Bill scoping & gap analysisAdd-onAdd-on✓✓
DORA / FCA Rules readiness – financial services*Add-onAdd-on✓✓
Other regulatory gap analysisAdd-onAdd-onAdd-onAdd-on
Readiness and alignment services support organisations in preparing for applicable standards, regulations, and certification schemes. BH Haven does not guarantee regulatory compliance or certification.
Cyber Insurance Support
ServiceFoundationStandardProfessionalScale
Cyber Insurance readiness assessment—1/year1/year1/year
Cyber Insurance renewal assistance—✓✓✓
PCI DSS — Where Applicable
ServiceFoundationStandardProfessionalScale
PCI Self-Assessment Questionnaire support✓✓✓✓
PCI DSS Assessment——✓✓
PCI Vulnerability Scan———✓
GDPR / Data Protection
ServiceFoundationStandardProfessionalScale
GDPR / Data Protection Gap AnalysisLite✓✓✓
GDPR / Data Protection PoliciesTemplatedTailoredTailoredTailored
ROPA development & review✓✓✓✓
ROPA annual maintenance—✓✓✓
DPIA support1/year2/yearUp to 5/yearUp to 10/year
Transfer Impact AssessmentAdd-onAdd-onUp to 2/yearUp to 4/year
DSAR & data-subject rights procedureTemplatedTailoredTailoredTailored
Data retention & deletion process development——✓✓
Cookie scan✓✓✓✓
Website Privacy Notice review✓✓✓✓
GDPR training✓✓✓✓
AI Governance
ServiceFoundationStandardProfessionalScale
AI AssessmentLite✓✓✓
AI PoliciesTemplatedTailoredTailoredTailored
AI inventory & shadow-AI discovery——✓✓
AI Awareness Training✓✓✓✓
EU AI Act risk classification1 system/year✓✓✓
ISO 42001 alignment / gap analysis——Add-on✓
Sector-Specific Bolt-Ons
Optional serviceFoundationStandardProfessionalScale
FinTech – CBI/FCA outsourcing & operational resilienceAdd-onAdd-onAdd-onAdd-on
Healthcare – HSE/NHS supplier assurance packAdd-onAdd-onAdd-onAdd-on
Charity – OSCR/Charity Commission data-handling guidanceAdd-onAdd-onAdd-onAdd-on
SaaS/Technology – Customer due-diligence packAdd-onAdd-onAdd-onAdd-on