Cookies are small text files that can be used by websites to make a user’s experience more efficient. The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.

We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services.

When you log on to our website for the first time, a message will appear asking for your consent to the use of Cookies, with a link to further details about the types of Cookies used, as well as a link to our full Cookies Policy. You may choose to consent to our use of all Cookies, or you may specify which types of Cookies may be employed. All Cookies used by and on Our Site are used in accordance with current Cookie Law.

This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages. Please see further below for a list of these cookies. You can at any time change or withdraw your consent from the Cookie Declaration on our website.

Learn more about who we are, how you can contact us and how we process personal data in our Privacy Statement.

Cookie Declaration.

Your consent applies to the following domains: bhconsulting.ie

Your current state: Allow all. 

Your consent ID: h1CwHL8OE+LQx0oFtl2gtuLDQpHZY/1TuT/lrEhi93JVsZHc5KOwdQ==Consent date: Thursday, August 6, 2026 at 03:22:25 PM GMT+1

Change your consent  |  Withdraw your consent

Cookie declaration last updated on 04/08/2026 by Cookiebot:

Necessary (13)

Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

NameProviderPurposeMaximum Storage DurationType
__cf_bm [x7]bhconsulting.ie
HubSpot
hs-banner.com
This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website.1 dayHTTP Cookie
CookieConsentCookiebotStores the user’s cookie consent state for the current domain1 yearHTTP Cookie
cookietestHubSpotThis cookie is used to determine if the visitor has accepted the cookie consent box.SessionHTTP Cookie
rc::aGoogleThis cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website.PersistentHTML Local Storage
rc::cGoogleThis cookie is used to distinguish between humans and bots.SessionHTML Local Storage
test_cookieGoogleUsed to check if the user’s browser supports cookies.1 dayHTTP Cookie
wpEmojiSettingsSupportsbhconsulting.ieThis cookie is part of a bundle of cookies which serve the purpose of content delivery and presentation. The cookies keep the correct state of font, blog/picture sliders, color themes and other website settings.SessionHTML Local Storage

Preferences (1)

Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.

NameProviderPurposeMaximum Storage DurationType
VISITOR_INFO1_LIVEYouTubeTries to estimate the users’ bandwidth on pages with integrated YouTube videos.180 daysHTTP Cookie

Statistics (7)

Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.

NameProviderPurposeMaximum Storage DurationType
__hsscHubSpotIdentifies if the cookie data needs to be updated in the visitor’s browser.1 dayHTTP Cookie
__hssrcHubSpotUsed to recognise the visitor’s browser upon reentry on the website.SessionHTTP Cookie
__hstcHubSpotSets a unique ID for the session. This allows the website to obtain data on visitor behaviour for statistical purposes.180 daysHTTP Cookie
_gaGoogleRegisters a unique ID that is used to generate statistical data on how the visitor uses the website.2 yearsHTTP Cookie
_ga_#GoogleUsed by Google Analytics to collect data on the number of times a user has visited the website as well as dates for the first and most recent visit.2 yearsHTTP Cookie
hubspotutkHubSpotSets a unique ID for the session. This allows the website to obtain data on visitor behaviour for statistical purposes.180 daysHTTP Cookie
YSCYouTubeRegisters a unique ID to keep statistics of what videos from YouTube the user has seen.SessionHTTP Cookie

Marketing (13)

Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.

NameProviderPurposeMaximum Storage DurationType
__ptq.gifHubSpotSends data to the marketing platform Hubspot about the visitor’s device and behaviour. Tracks the visitor across devices and marketing channels.SessionPixel Tracker
__Secure-ROLLOUT_TOKENYouTubeUsed to track user’s interaction with embedded content.180 daysHTTP Cookie
__Secure-YECYouTubeStores the user’s video player preferences using embedded YouTube videoSessionHTTP Cookie
__Secure-YNIDYouTubeUsed to track user’s interaction with embedded content.180 daysHTTP Cookie
_gcl_auGoogleUsed by Google AdSense for experimenting with advertisement efficiency across websites using their services.3 monthsHTTP Cookie
_gcl_lsGoogleTracks the conversion rate between the user and the advertisement banners on the website – This serves to optimise the relevance of the advertisements on the website.PersistentHTML Local Storage
LAST_RESULT_ENTRY_KEYYouTubeUsed to track user’s interaction with embedded content.SessionHTTP Cookie
LogsDatabaseV2:V#||LogsRequestsStoreYouTubeUsed to track user’s interaction with embedded content.PersistentIndexedDB
pagead/1p-user-list/#GoogleTracks if the user has shown interest in specific products or events across multiple websites and detects how the user navigates between sites. This is used for measurement of advertisement efforts and facilitates payment of referral-fees between websites.SessionPixel Tracker
ServiceWorkerLogsDatabase#SWHealthLogYouTubeNecessary for the implementation and functionality of YouTube video-content on the website.PersistentIndexedDB
TESTCOOKIESENABLEDYouTubeUsed to track user’s interaction with embedded content.1 dayHTTP Cookie
yt-icons-last-purgedYouTubeNecessary for the implementation and functionality of YouTube video-content on the website.PersistentHTML Local Storage
YtIdbMeta#databasesYouTubeUsed to track user’s interaction with embedded content.PersistentIndexedDB
Compare key inclusionsView full comparison
Tier Sizing & Support
ServiceFoundationStandardProfessionalScale
Typical company size1–1010–5051–150151–250
Consulting days available261224
Governance & Strategic Advisory
ServiceFoundationStandardProfessionalScale
Virtual CISO advisoryQuarterlyQuarterlyQuarterlyQuarterly
Virtual Data Protection advisoryQuarterlyQuarterlyQuarterlyQuarterly
Virtual AI Officer advisoryQuarterlyQuarterlyQuarterlyQuarterly
Board presentationAnnualTwice yearly
Board awareness / cyber-literacy trainingAnnualTwice yearly
Key industry developments briefingAnnualAnnualTwice yearlyQuarterly
Compliance & security posture dashboardAnnualAnnualTwice yearlyQuarterly
Customer Trust Pack
Customer security questionnaire supportUp to 1/yearUp to 2/yearUp to 4/yearUp to 10/year
Executive reportingMonthly
Cybersecurity — Core Assurance
ServiceFoundationStandardProfessionalScale
Cybersecurity Maturity AssessmentLite
Cybersecurity Risk Assessment
Cybersecurity Risk Register
Cybersecurity PoliciesTemplatedTailoredTailoredTailored
Third-Party Vendor Risk Register
Third-party vendor exposure analysis3/year3/year
Supplier onboarding security pack
Backup & Restore posture review
Backup / DR tabletop exerciseAnnualAnnual
Backup & restore / ransomware recovery exerciseAnnual
Identity & Access Management review
MFA & privileged-access governance
Endpoint / EDR posture reviewAnnualAnnualTwice yearlyQuarterly
Dark web / credential monitoring
Firewall Security Assessment
Technical Testing & Exposure Management
ServiceFoundationStandardProfessionalScale
Vulnerability Assessment1 item/year2 items/year4 items/year4 items/year
External attack-surface monitoring
Penetration testing1/year2/year
Microsoft 365 / Google exposure review
Microsoft 365 / Google Workspace Security Assessment
Cloud Security Posture Assessment1/year2/year
Active Directory / Entra ID review
Simulated phishing testAnnualTwice yearlyQuarterlyQuarterly
Company & employee OSINT footprint
Domain & subdomain security
DNS / certificate / CA misconfiguration checks
Impersonation & brand protection – DMARC/SPF/DKIM
Exposed management interface checks
Public secrets exposure search
Awareness, Training & People
ServiceFoundationStandardProfessionalScale
Online Security Awareness Training platform
Staff awareness newsletter
Managed Cybersecurity Awareness Programme
Lunch & Learn awareness sessions1/year2/year
Role-based training – Developers, Finance, HR etc.1 role/year2 roles/year
AI literacy / staff AI awareness training
Incident Response & Resilience
ServiceFoundationStandardProfessionalScale
Incident Response & Data Breach PoliciesTemplatedTailoredTailoredTailored
Incident Response advisory support – business hoursAdd-onUp to 8 hrsUp to 16 hrsUp to 24 hrs
Incident Response runbooks12510
Incident Response Tabletop ExerciseAnnualTwice yearly
Breach notification drafting templates – DPC/ICOTemplated
Breach notification workflow & regulator communications playbook
Cyber Resilience & Business Continuity PlanAnnual reviewFull plan
Certification & Regulatory Compliance Readiness
ServiceFoundationStandardProfessionalScale
Cyber Essentials readiness & certification supportAdd-on
Cyber Essentials Plus readiness*Add-onAdd-on
Cyber Fundamentals alignment*Add-on
ISO 27001 alignment / gap analysisAdd-onAdd-on
ISO 27001 certification readiness*Add-onAdd-onAdd-on
SOC 2 readiness*Add-onAdd-onAdd-on
NIS2 / Cyber Security and Resilience Bill scoping & gap analysisAdd-onAdd-on
DORA / FCA Rules readiness – financial services*Add-onAdd-on
Other regulatory gap analysisAdd-onAdd-onAdd-onAdd-on
Readiness and alignment services support organisations in preparing for applicable standards, regulations, and certification schemes. BH Haven does not guarantee regulatory compliance or certification.
Cyber Insurance Support
ServiceFoundationStandardProfessionalScale
Cyber Insurance readiness assessment1/year1/year1/year
Cyber Insurance renewal assistance
PCI DSS — Where Applicable
ServiceFoundationStandardProfessionalScale
PCI Self-Assessment Questionnaire support
PCI DSS Assessment
PCI Vulnerability Scan
GDPR / Data Protection
ServiceFoundationStandardProfessionalScale
GDPR / Data Protection Gap AnalysisLite
GDPR / Data Protection PoliciesTemplatedTailoredTailoredTailored
ROPA development & review
ROPA annual maintenance
DPIA support1/year2/yearUp to 5/yearUp to 10/year
Transfer Impact AssessmentAdd-onAdd-onUp to 2/yearUp to 4/year
DSAR & data-subject rights procedureTemplatedTailoredTailoredTailored
Data retention & deletion process development
Cookie scan
Website Privacy Notice review
GDPR training
AI Governance
ServiceFoundationStandardProfessionalScale
AI AssessmentLite
AI PoliciesTemplatedTailoredTailoredTailored
AI inventory & shadow-AI discovery
AI Awareness Training
EU AI Act risk classification1 system/year
ISO 42001 alignment / gap analysisAdd-on
Sector-Specific Bolt-Ons
Optional serviceFoundationStandardProfessionalScale
FinTech – CBI/FCA outsourcing & operational resilienceAdd-onAdd-onAdd-onAdd-on
Healthcare – HSE/NHS supplier assurance packAdd-onAdd-onAdd-onAdd-on
Charity – OSCR/Charity Commission data-handling guidanceAdd-onAdd-onAdd-onAdd-on
SaaS/Technology – Customer due-diligence packAdd-onAdd-onAdd-onAdd-on
Compare key inclusionsView full comparison
Tier Sizing & Support
ServiceFoundationStandardProfessionalScale
Typical company size1–1010–5051–150151–250
Consulting days available261224
Governance & Strategic Advisory
ServiceFoundationStandardProfessionalScale
Virtual CISO advisoryQuarterlyQuarterlyQuarterlyQuarterly
Virtual Data Protection advisoryQuarterlyQuarterlyQuarterlyQuarterly
Virtual AI Officer advisoryQuarterlyQuarterlyQuarterlyQuarterly
Board presentationAnnualTwice yearly
Board awareness / cyber-literacy trainingAnnualTwice yearly
Key industry developments briefingAnnualAnnualTwice yearlyQuarterly
Compliance & security posture dashboardAnnualAnnualTwice yearlyQuarterly
Customer Trust Pack
Customer security questionnaire supportUp to 1/yearUp to 2/yearUp to 4/yearUp to 10/year
Executive reportingMonthly
Cybersecurity — Core Assurance
ServiceFoundationStandardProfessionalScale
Cybersecurity Maturity AssessmentLite
Cybersecurity Risk Assessment
Cybersecurity Risk Register
Cybersecurity PoliciesTemplatedTailoredTailoredTailored
Third-Party Vendor Risk Register
Third-party vendor exposure analysis3/year3/year
Supplier onboarding security pack
Backup & Restore posture review
Backup / DR tabletop exerciseAnnualAnnual
Backup & restore / ransomware recovery exerciseAnnual
Identity & Access Management review
MFA & privileged-access governance
Endpoint / EDR posture reviewAnnualAnnualTwice yearlyQuarterly
Dark web / credential monitoring
Firewall Security Assessment
Technical Testing & Exposure Management
ServiceFoundationStandardProfessionalScale
Vulnerability Assessment1 item/year2 items/year4 items/year4 items/year
External attack-surface monitoring
Penetration testing1/year2/year
Microsoft 365 / Google exposure review
Microsoft 365 / Google Workspace Security Assessment
Cloud Security Posture Assessment1/year2/year
Active Directory / Entra ID review
Simulated phishing testAnnualTwice yearlyQuarterlyQuarterly
Company & employee OSINT footprint
Domain & subdomain security
DNS / certificate / CA misconfiguration checks
Impersonation & brand protection – DMARC/SPF/DKIM
Exposed management interface checks
Public secrets exposure search
Awareness, Training & People
ServiceFoundationStandardProfessionalScale
Online Security Awareness Training platform
Staff awareness newsletter
Managed Cybersecurity Awareness Programme
Lunch & Learn awareness sessions1/year2/year
Role-based training – Developers, Finance, HR etc.1 role/year2 roles/year
AI literacy / staff AI awareness training
Incident Response & Resilience
ServiceFoundationStandardProfessionalScale
Incident Response & Data Breach PoliciesTemplatedTailoredTailoredTailored
Incident Response advisory support – business hoursAdd-onUp to 8 hrsUp to 16 hrsUp to 24 hrs
Incident Response runbooks12510
Incident Response Tabletop ExerciseAnnualTwice yearly
Breach notification drafting templates – DPC/ICOTemplated
Breach notification workflow & regulator communications playbook
Cyber Resilience & Business Continuity PlanAnnual reviewFull plan
Certification & Regulatory Compliance Readiness
ServiceFoundationStandardProfessionalScale
Cyber Essentials readiness & certification supportAdd-on
Cyber Essentials Plus readiness*Add-onAdd-on
Cyber Fundamentals alignment*Add-on
ISO 27001 alignment / gap analysisAdd-onAdd-on
ISO 27001 certification readiness*Add-onAdd-onAdd-on
SOC 2 readiness*Add-onAdd-onAdd-on
NIS2 / Cyber Security and Resilience Bill scoping & gap analysisAdd-onAdd-on
DORA / FCA Rules readiness – financial services*Add-onAdd-on
Other regulatory gap analysisAdd-onAdd-onAdd-onAdd-on
Readiness and alignment services support organisations in preparing for applicable standards, regulations, and certification schemes. BH Haven does not guarantee regulatory compliance or certification.
Cyber Insurance Support
ServiceFoundationStandardProfessionalScale
Cyber Insurance readiness assessment1/year1/year1/year
Cyber Insurance renewal assistance
PCI DSS — Where Applicable
ServiceFoundationStandardProfessionalScale
PCI Self-Assessment Questionnaire support
PCI DSS Assessment
PCI Vulnerability Scan
GDPR / Data Protection
ServiceFoundationStandardProfessionalScale
GDPR / Data Protection Gap AnalysisLite
GDPR / Data Protection PoliciesTemplatedTailoredTailoredTailored
ROPA development & review
ROPA annual maintenance
DPIA support1/year2/yearUp to 5/yearUp to 10/year
Transfer Impact AssessmentAdd-onAdd-onUp to 2/yearUp to 4/year
DSAR & data-subject rights procedureTemplatedTailoredTailoredTailored
Data retention & deletion process development
Cookie scan
Website Privacy Notice review
GDPR training
AI Governance
ServiceFoundationStandardProfessionalScale
AI AssessmentLite
AI PoliciesTemplatedTailoredTailoredTailored
AI inventory & shadow-AI discovery
AI Awareness Training
EU AI Act risk classification1 system/year
ISO 42001 alignment / gap analysisAdd-on
Sector-Specific Bolt-Ons
Optional serviceFoundationStandardProfessionalScale
FinTech – CBI/FCA outsourcing & operational resilienceAdd-onAdd-onAdd-onAdd-on
Healthcare – HSE/NHS supplier assurance packAdd-onAdd-onAdd-onAdd-on
Charity – OSCR/Charity Commission data-handling guidanceAdd-onAdd-onAdd-onAdd-on
SaaS/Technology – Customer due-diligence packAdd-onAdd-onAdd-onAdd-on