1. No liability for any errors or omissions

The information contained in this Website has been provided by BH IT Consulting Ltd. trading as BH Consulting for information purposes only. This information does not constitute legal, professional or commercial advice. While every care has been taken to ensure that the content is useful and accurate, BH IT Consulting Ltd. trading as BH Consulting gives no guarantees, undertakings or warranties in this regard, and does not accept any legal liability or responsibility for the content or the accuracy of the information so provided, or, for any loss or damage caused arising directly or indirectly in connection with reliance on the use of such information. Any errors or omissions brought to the attention of BH IT Consulting Ltd. trading as BH Consulting will be corrected as soon as possible.

The information in this website may contain technical inaccuracies and typographical errors. The information in this website may be updated from time to time and may at times be out of date.  BH IT Consulting Ltd. trading as BH Consulting accepts no responsibility for keeping the information in this website up to date or any liability whatsoever for any failure to do so.

2. Material on this website does not constitute legal and/or professional advice

Any views, opinions and guidance set out in this website are provided for information purposes only, and do not purport to be legal and/or professional advice or a definitive interpretation of any law. Anyone contemplating action in respect of matters set out in this website should obtain advice from a suitably qualified professional adviser based on their unique requirements.

3. No Warranty or Endorsement

BH Consulting Ltd. trading as BH Consulting does not make any warranty, express or implied, including warranties of merchantability and fitness for a particular purpose, nor does it assume any legal liability or responsibility for the accuracy, completeness, or usefulness of any information, apparatus, product, or process disclosed, nor does it represent that its use would not infringe privately owned rights.

Reference in this Website to any specific commercial products, process or service by trade name, trademark, manufacturer, or otherwise, does not necessarily constitute or imply its endorsement, recommendation, or favouring by BH Consulting Ltd. trading as BH Consulting. The views and opinions of authors expressed herein do not necessarily state or reflect those of BH Consulting Ltd. trading as BH Consulting and shall not be used for advertising or product endorsement purposes.

4. No responsibility for other websites

When you access other external websites through a link from the  website of BH Consulting Ltd. trading as BH Consulting, please note that that BH Consulting Ltd. trading as BH Consulting has no control over the content on external websites. The links to external websites are provided as a matter of convenience only, and should not be taken as an endorsement by BH Consulting Ltd. trading as BH Consulting of the contents or practices of those external websites, for which BH Consulting Ltd. trading as BH Consulting assumes no responsibility or liability.

5. Third Party Company and Products (Real and Fictitious)

Any reference or mention to third party companies and/or products on the website of BH Consulting Ltd. trading as BH Consulting, is for purely informational purposes only. This information does not constitute either an endorsement or a recommendation.  Unless clearly stated otherwise, all third party products and/or services must be ordered directly from the vendor and all licenses and warranties take place between you and the vendor. BH Consulting Ltd. trading as BH Consulting accepts no liability whatsoever for the use or misuse of any third party companies and their products and/or services.

Compare key inclusionsView full comparison
Tier Sizing & Support
ServiceFoundationStandardProfessionalScale
Typical company size1–1010–5051–150151–250
Consulting days available261224
Governance & Strategic Advisory
ServiceFoundationStandardProfessionalScale
Virtual CISO advisoryQuarterlyQuarterlyQuarterlyQuarterly
Virtual Data Protection advisoryQuarterlyQuarterlyQuarterlyQuarterly
Virtual AI Officer advisoryQuarterlyQuarterlyQuarterlyQuarterly
Board presentation——AnnualTwice yearly
Board awareness / cyber-literacy training——AnnualTwice yearly
Key industry developments briefingAnnualAnnualTwice yearlyQuarterly
Compliance & security posture dashboardAnnualAnnualTwice yearlyQuarterly
Customer Trust Pack✓✓✓✓
Customer security questionnaire supportUp to 1/yearUp to 2/yearUp to 4/yearUp to 10/year
Executive reporting———Monthly
Cybersecurity — Core Assurance
ServiceFoundationStandardProfessionalScale
Cybersecurity Maturity AssessmentLite✓✓✓
Cybersecurity Risk Assessment✓✓✓✓
Cybersecurity Risk Register✓✓✓✓
Cybersecurity PoliciesTemplatedTailoredTailoredTailored
Third-Party Vendor Risk Register✓✓✓✓
Third-party vendor exposure analysis✓✓3/year3/year
Supplier onboarding security pack——✓✓
Backup & Restore posture review✓✓✓✓
Backup / DR tabletop exercise——AnnualAnnual
Backup & restore / ransomware recovery exercise———Annual
Identity & Access Management review✓✓✓✓
MFA & privileged-access governance—✓✓✓
Endpoint / EDR posture reviewAnnualAnnualTwice yearlyQuarterly
Dark web / credential monitoring✓✓✓✓
Firewall Security Assessment✓✓✓✓
Technical Testing & Exposure Management
ServiceFoundationStandardProfessionalScale
Vulnerability Assessment1 item/year2 items/year4 items/year4 items/year
External attack-surface monitoring✓✓✓✓
Penetration testing——1/year2/year
Microsoft 365 / Google exposure review✓✓✓✓
Microsoft 365 / Google Workspace Security Assessment✓✓✓✓
Cloud Security Posture Assessment——1/year2/year
Active Directory / Entra ID review✓✓✓✓
Simulated phishing testAnnualTwice yearlyQuarterlyQuarterly
Company & employee OSINT footprint✓✓✓✓
Domain & subdomain security✓✓✓✓
DNS / certificate / CA misconfiguration checks✓✓✓✓
Impersonation & brand protection – DMARC/SPF/DKIM✓✓✓✓
Exposed management interface checks✓✓✓✓
Public secrets exposure search✓✓✓✓
Awareness, Training & People
ServiceFoundationStandardProfessionalScale
Online Security Awareness Training platform✓✓✓✓
Staff awareness newsletter✓✓✓✓
Managed Cybersecurity Awareness Programme——✓✓
Lunch & Learn awareness sessions——1/year2/year
Role-based training – Developers, Finance, HR etc.——1 role/year2 roles/year
AI literacy / staff AI awareness training——✓✓
Incident Response & Resilience
ServiceFoundationStandardProfessionalScale
Incident Response & Data Breach PoliciesTemplatedTailoredTailoredTailored
Incident Response advisory support – business hoursAdd-onUp to 8 hrsUp to 16 hrsUp to 24 hrs
Incident Response runbooks12510
Incident Response Tabletop Exercise——AnnualTwice yearly
Breach notification drafting templates – DPC/ICOTemplated✓✓✓
Breach notification workflow & regulator communications playbook——✓✓
Cyber Resilience & Business Continuity Plan——Annual reviewFull plan
Certification & Regulatory Compliance Readiness
ServiceFoundationStandardProfessionalScale
Cyber Essentials readiness & certification supportAdd-on✓✓✓
Cyber Essentials Plus readiness*Add-onAdd-on✓✓
Cyber Fundamentals alignment*Add-on✓✓✓
ISO 27001 alignment / gap analysisAdd-onAdd-on✓✓
ISO 27001 certification readiness*Add-onAdd-onAdd-on✓
SOC 2 readiness*Add-onAdd-onAdd-on✓
NIS2 / Cyber Security and Resilience Bill scoping & gap analysisAdd-onAdd-on✓✓
DORA / FCA Rules readiness – financial services*Add-onAdd-on✓✓
Other regulatory gap analysisAdd-onAdd-onAdd-onAdd-on
Readiness and alignment services support organisations in preparing for applicable standards, regulations, and certification schemes. BH Haven does not guarantee regulatory compliance or certification.
Cyber Insurance Support
ServiceFoundationStandardProfessionalScale
Cyber Insurance readiness assessment—1/year1/year1/year
Cyber Insurance renewal assistance—✓✓✓
PCI DSS — Where Applicable
ServiceFoundationStandardProfessionalScale
PCI Self-Assessment Questionnaire support✓✓✓✓
PCI DSS Assessment——✓✓
PCI Vulnerability Scan———✓
GDPR / Data Protection
ServiceFoundationStandardProfessionalScale
GDPR / Data Protection Gap AnalysisLite✓✓✓
GDPR / Data Protection PoliciesTemplatedTailoredTailoredTailored
ROPA development & review✓✓✓✓
ROPA annual maintenance—✓✓✓
DPIA support1/year2/yearUp to 5/yearUp to 10/year
Transfer Impact AssessmentAdd-onAdd-onUp to 2/yearUp to 4/year
DSAR & data-subject rights procedureTemplatedTailoredTailoredTailored
Data retention & deletion process development——✓✓
Cookie scan✓✓✓✓
Website Privacy Notice review✓✓✓✓
GDPR training✓✓✓✓
AI Governance
ServiceFoundationStandardProfessionalScale
AI AssessmentLite✓✓✓
AI PoliciesTemplatedTailoredTailoredTailored
AI inventory & shadow-AI discovery——✓✓
AI Awareness Training✓✓✓✓
EU AI Act risk classification1 system/year✓✓✓
ISO 42001 alignment / gap analysis——Add-on✓
Sector-Specific Bolt-Ons
Optional serviceFoundationStandardProfessionalScale
FinTech – CBI/FCA outsourcing & operational resilienceAdd-onAdd-onAdd-onAdd-on
Healthcare – HSE/NHS supplier assurance packAdd-onAdd-onAdd-onAdd-on
Charity – OSCR/Charity Commission data-handling guidanceAdd-onAdd-onAdd-onAdd-on
SaaS/Technology – Customer due-diligence packAdd-onAdd-onAdd-onAdd-on
Compare key inclusionsView full comparison
Tier Sizing & Support
ServiceFoundationStandardProfessionalScale
Typical company size1–1010–5051–150151–250
Consulting days available261224
Governance & Strategic Advisory
ServiceFoundationStandardProfessionalScale
Virtual CISO advisoryQuarterlyQuarterlyQuarterlyQuarterly
Virtual Data Protection advisoryQuarterlyQuarterlyQuarterlyQuarterly
Virtual AI Officer advisoryQuarterlyQuarterlyQuarterlyQuarterly
Board presentation——AnnualTwice yearly
Board awareness / cyber-literacy training——AnnualTwice yearly
Key industry developments briefingAnnualAnnualTwice yearlyQuarterly
Compliance & security posture dashboardAnnualAnnualTwice yearlyQuarterly
Customer Trust Pack✓✓✓✓
Customer security questionnaire supportUp to 1/yearUp to 2/yearUp to 4/yearUp to 10/year
Executive reporting———Monthly
Cybersecurity — Core Assurance
ServiceFoundationStandardProfessionalScale
Cybersecurity Maturity AssessmentLite✓✓✓
Cybersecurity Risk Assessment✓✓✓✓
Cybersecurity Risk Register✓✓✓✓
Cybersecurity PoliciesTemplatedTailoredTailoredTailored
Third-Party Vendor Risk Register✓✓✓✓
Third-party vendor exposure analysis✓✓3/year3/year
Supplier onboarding security pack——✓✓
Backup & Restore posture review✓✓✓✓
Backup / DR tabletop exercise——AnnualAnnual
Backup & restore / ransomware recovery exercise———Annual
Identity & Access Management review✓✓✓✓
MFA & privileged-access governance—✓✓✓
Endpoint / EDR posture reviewAnnualAnnualTwice yearlyQuarterly
Dark web / credential monitoring✓✓✓✓
Firewall Security Assessment✓✓✓✓
Technical Testing & Exposure Management
ServiceFoundationStandardProfessionalScale
Vulnerability Assessment1 item/year2 items/year4 items/year4 items/year
External attack-surface monitoring✓✓✓✓
Penetration testing——1/year2/year
Microsoft 365 / Google exposure review✓✓✓✓
Microsoft 365 / Google Workspace Security Assessment✓✓✓✓
Cloud Security Posture Assessment——1/year2/year
Active Directory / Entra ID review✓✓✓✓
Simulated phishing testAnnualTwice yearlyQuarterlyQuarterly
Company & employee OSINT footprint✓✓✓✓
Domain & subdomain security✓✓✓✓
DNS / certificate / CA misconfiguration checks✓✓✓✓
Impersonation & brand protection – DMARC/SPF/DKIM✓✓✓✓
Exposed management interface checks✓✓✓✓
Public secrets exposure search✓✓✓✓
Awareness, Training & People
ServiceFoundationStandardProfessionalScale
Online Security Awareness Training platform✓✓✓✓
Staff awareness newsletter✓✓✓✓
Managed Cybersecurity Awareness Programme——✓✓
Lunch & Learn awareness sessions——1/year2/year
Role-based training – Developers, Finance, HR etc.——1 role/year2 roles/year
AI literacy / staff AI awareness training——✓✓
Incident Response & Resilience
ServiceFoundationStandardProfessionalScale
Incident Response & Data Breach PoliciesTemplatedTailoredTailoredTailored
Incident Response advisory support – business hoursAdd-onUp to 8 hrsUp to 16 hrsUp to 24 hrs
Incident Response runbooks12510
Incident Response Tabletop Exercise——AnnualTwice yearly
Breach notification drafting templates – DPC/ICOTemplated✓✓✓
Breach notification workflow & regulator communications playbook——✓✓
Cyber Resilience & Business Continuity Plan——Annual reviewFull plan
Certification & Regulatory Compliance Readiness
ServiceFoundationStandardProfessionalScale
Cyber Essentials readiness & certification supportAdd-on✓✓✓
Cyber Essentials Plus readiness*Add-onAdd-on✓✓
Cyber Fundamentals alignment*Add-on✓✓✓
ISO 27001 alignment / gap analysisAdd-onAdd-on✓✓
ISO 27001 certification readiness*Add-onAdd-onAdd-on✓
SOC 2 readiness*Add-onAdd-onAdd-on✓
NIS2 / Cyber Security and Resilience Bill scoping & gap analysisAdd-onAdd-on✓✓
DORA / FCA Rules readiness – financial services*Add-onAdd-on✓✓
Other regulatory gap analysisAdd-onAdd-onAdd-onAdd-on
Readiness and alignment services support organisations in preparing for applicable standards, regulations, and certification schemes. BH Haven does not guarantee regulatory compliance or certification.
Cyber Insurance Support
ServiceFoundationStandardProfessionalScale
Cyber Insurance readiness assessment—1/year1/year1/year
Cyber Insurance renewal assistance—✓✓✓
PCI DSS — Where Applicable
ServiceFoundationStandardProfessionalScale
PCI Self-Assessment Questionnaire support✓✓✓✓
PCI DSS Assessment——✓✓
PCI Vulnerability Scan———✓
GDPR / Data Protection
ServiceFoundationStandardProfessionalScale
GDPR / Data Protection Gap AnalysisLite✓✓✓
GDPR / Data Protection PoliciesTemplatedTailoredTailoredTailored
ROPA development & review✓✓✓✓
ROPA annual maintenance—✓✓✓
DPIA support1/year2/yearUp to 5/yearUp to 10/year
Transfer Impact AssessmentAdd-onAdd-onUp to 2/yearUp to 4/year
DSAR & data-subject rights procedureTemplatedTailoredTailoredTailored
Data retention & deletion process development——✓✓
Cookie scan✓✓✓✓
Website Privacy Notice review✓✓✓✓
GDPR training✓✓✓✓
AI Governance
ServiceFoundationStandardProfessionalScale
AI AssessmentLite✓✓✓
AI PoliciesTemplatedTailoredTailoredTailored
AI inventory & shadow-AI discovery——✓✓
AI Awareness Training✓✓✓✓
EU AI Act risk classification1 system/year✓✓✓
ISO 42001 alignment / gap analysis——Add-on✓
Sector-Specific Bolt-Ons
Optional serviceFoundationStandardProfessionalScale
FinTech – CBI/FCA outsourcing & operational resilienceAdd-onAdd-onAdd-onAdd-on
Healthcare – HSE/NHS supplier assurance packAdd-onAdd-onAdd-onAdd-on
Charity – OSCR/Charity Commission data-handling guidanceAdd-onAdd-onAdd-onAdd-on
SaaS/Technology – Customer due-diligence packAdd-onAdd-onAdd-onAdd-on