1. No liability for any errors or omissions

The information contained in this Website has been provided by BH IT Consulting Ltd. trading as BH Consulting for information purposes only. This information does not constitute legal, professional or commercial advice. While every care has been taken to ensure that the content is useful and accurate, BH IT Consulting Ltd. trading as BH Consulting gives no guarantees, undertakings or warranties in this regard, and does not accept any legal liability or responsibility for the content or the accuracy of the information so provided, or, for any loss or damage caused arising directly or indirectly in connection with reliance on the use of such information. Any errors or omissions brought to the attention of BH IT Consulting Ltd. trading as BH Consulting will be corrected as soon as possible.

The information in this website may contain technical inaccuracies and typographical errors. The information in this website may be updated from time to time and may at times be out of date.  BH IT Consulting Ltd. trading as BH Consulting accepts no responsibility for keeping the information in this website up to date or any liability whatsoever for any failure to do so.

2. Material on this website does not constitute legal and/or professional advice

Any views, opinions and guidance set out in this website are provided for information purposes only, and do not purport to be legal and/or professional advice or a definitive interpretation of any law. Anyone contemplating action in respect of matters set out in this website should obtain advice from a suitably qualified professional adviser based on their unique requirements.

3. No Warranty or Endorsement

BH Consulting Ltd. trading as BH Consulting does not make any warranty, express or implied, including warranties of merchantability and fitness for a particular purpose, nor does it assume any legal liability or responsibility for the accuracy, completeness, or usefulness of any information, apparatus, product, or process disclosed, nor does it represent that its use would not infringe privately owned rights.

Reference in this Website to any specific commercial products, process or service by trade name, trademark, manufacturer, or otherwise, does not necessarily constitute or imply its endorsement, recommendation, or favouring by BH Consulting Ltd. trading as BH Consulting. The views and opinions of authors expressed herein do not necessarily state or reflect those of BH Consulting Ltd. trading as BH Consulting and shall not be used for advertising or product endorsement purposes.

4. No responsibility for other websites

When you access other external websites through a link from the  website of BH Consulting Ltd. trading as BH Consulting, please note that that BH Consulting Ltd. trading as BH Consulting has no control over the content on external websites. The links to external websites are provided as a matter of convenience only, and should not be taken as an endorsement by BH Consulting Ltd. trading as BH Consulting of the contents or practices of those external websites, for which BH Consulting Ltd. trading as BH Consulting assumes no responsibility or liability.

5. Third Party Company and Products (Real and Fictitious)

Any reference or mention to third party companies and/or products on the website of BH Consulting Ltd. trading as BH Consulting, is for purely informational purposes only. This information does not constitute either an endorsement or a recommendation.  Unless clearly stated otherwise, all third party products and/or services must be ordered directly from the vendor and all licenses and warranties take place between you and the vendor. BH Consulting Ltd. trading as BH Consulting accepts no liability whatsoever for the use or misuse of any third party companies and their products and/or services.

Compare key inclusionsView full comparison
Tier Sizing & Support
ServiceFoundationStandardProfessionalScale
Typical company size1–1010–5051–150151–250
Consulting days available261224
Governance & Strategic Advisory
ServiceFoundationStandardProfessionalScale
Virtual CISO advisoryQuarterlyQuarterlyQuarterlyQuarterly
Virtual Data Protection advisoryQuarterlyQuarterlyQuarterlyQuarterly
Virtual AI Officer advisoryQuarterlyQuarterlyQuarterlyQuarterly
Board presentationAnnualTwice yearly
Board awareness / cyber-literacy trainingAnnualTwice yearly
Key industry developments briefingAnnualAnnualTwice yearlyQuarterly
Compliance & security posture dashboardAnnualAnnualTwice yearlyQuarterly
Customer Trust Pack
Customer security questionnaire supportUp to 1/yearUp to 2/yearUp to 4/yearUp to 10/year
Executive reportingMonthly
Cybersecurity — Core Assurance
ServiceFoundationStandardProfessionalScale
Cybersecurity Maturity AssessmentLite
Cybersecurity Risk Assessment
Cybersecurity Risk Register
Cybersecurity PoliciesTemplatedTailoredTailoredTailored
Third-Party Vendor Risk Register
Third-party vendor exposure analysis3/year3/year
Supplier onboarding security pack
Backup & Restore posture review
Backup / DR tabletop exerciseAnnualAnnual
Backup & restore / ransomware recovery exerciseAnnual
Identity & Access Management review
MFA & privileged-access governance
Endpoint / EDR posture reviewAnnualAnnualTwice yearlyQuarterly
Dark web / credential monitoring
Firewall Security Assessment
Technical Testing & Exposure Management
ServiceFoundationStandardProfessionalScale
Vulnerability Assessment1 item/year2 items/year4 items/year4 items/year
External attack-surface monitoring
Penetration testing1/year2/year
Microsoft 365 / Google exposure review
Microsoft 365 / Google Workspace Security Assessment
Cloud Security Posture Assessment1/year2/year
Active Directory / Entra ID review
Simulated phishing testAnnualTwice yearlyQuarterlyQuarterly
Company & employee OSINT footprint
Domain & subdomain security
DNS / certificate / CA misconfiguration checks
Impersonation & brand protection – DMARC/SPF/DKIM
Exposed management interface checks
Public secrets exposure search
Awareness, Training & People
ServiceFoundationStandardProfessionalScale
Online Security Awareness Training platform
Staff awareness newsletter
Managed Cybersecurity Awareness Programme
Lunch & Learn awareness sessions1/year2/year
Role-based training – Developers, Finance, HR etc.1 role/year2 roles/year
AI literacy / staff AI awareness training
Incident Response & Resilience
ServiceFoundationStandardProfessionalScale
Incident Response & Data Breach PoliciesTemplatedTailoredTailoredTailored
Incident Response advisory support – business hoursAdd-onUp to 8 hrsUp to 16 hrsUp to 24 hrs
Incident Response runbooks12510
Incident Response Tabletop ExerciseAnnualTwice yearly
Breach notification drafting templates – DPC/ICOTemplated
Breach notification workflow & regulator communications playbook
Cyber Resilience & Business Continuity PlanAnnual reviewFull plan
Certification & Regulatory Compliance Readiness
ServiceFoundationStandardProfessionalScale
Cyber Essentials readiness & certification supportAdd-on
Cyber Essentials Plus readiness*Add-onAdd-on
Cyber Fundamentals alignment*Add-on
ISO 27001 alignment / gap analysisAdd-onAdd-on
ISO 27001 certification readiness*Add-onAdd-onAdd-on
SOC 2 readiness*Add-onAdd-onAdd-on
NIS2 / Cyber Security and Resilience Bill scoping & gap analysisAdd-onAdd-on
DORA / FCA Rules readiness – financial services*Add-onAdd-on
Other regulatory gap analysisAdd-onAdd-onAdd-onAdd-on
Readiness and alignment services support organisations in preparing for applicable standards, regulations, and certification schemes. BH Haven does not guarantee regulatory compliance or certification.
Cyber Insurance Support
ServiceFoundationStandardProfessionalScale
Cyber Insurance readiness assessment1/year1/year1/year
Cyber Insurance renewal assistance
PCI DSS — Where Applicable
ServiceFoundationStandardProfessionalScale
PCI Self-Assessment Questionnaire support
PCI DSS Assessment
PCI Vulnerability Scan
GDPR / Data Protection
ServiceFoundationStandardProfessionalScale
GDPR / Data Protection Gap AnalysisLite
GDPR / Data Protection PoliciesTemplatedTailoredTailoredTailored
ROPA development & review
ROPA annual maintenance
DPIA support1/year2/yearUp to 5/yearUp to 10/year
Transfer Impact AssessmentAdd-onAdd-onUp to 2/yearUp to 4/year
DSAR & data-subject rights procedureTemplatedTailoredTailoredTailored
Data retention & deletion process development
Cookie scan
Website Privacy Notice review
GDPR training
AI Governance
ServiceFoundationStandardProfessionalScale
AI AssessmentLite
AI PoliciesTemplatedTailoredTailoredTailored
AI inventory & shadow-AI discovery
AI Awareness Training
EU AI Act risk classification1 system/year
ISO 42001 alignment / gap analysisAdd-on
Sector-Specific Bolt-Ons
Optional serviceFoundationStandardProfessionalScale
FinTech – CBI/FCA outsourcing & operational resilienceAdd-onAdd-onAdd-onAdd-on
Healthcare – HSE/NHS supplier assurance packAdd-onAdd-onAdd-onAdd-on
Charity – OSCR/Charity Commission data-handling guidanceAdd-onAdd-onAdd-onAdd-on
SaaS/Technology – Customer due-diligence packAdd-onAdd-onAdd-onAdd-on
Compare key inclusionsView full comparison
Tier Sizing & Support
ServiceFoundationStandardProfessionalScale
Typical company size1–1010–5051–150151–250
Consulting days available261224
Governance & Strategic Advisory
ServiceFoundationStandardProfessionalScale
Virtual CISO advisoryQuarterlyQuarterlyQuarterlyQuarterly
Virtual Data Protection advisoryQuarterlyQuarterlyQuarterlyQuarterly
Virtual AI Officer advisoryQuarterlyQuarterlyQuarterlyQuarterly
Board presentationAnnualTwice yearly
Board awareness / cyber-literacy trainingAnnualTwice yearly
Key industry developments briefingAnnualAnnualTwice yearlyQuarterly
Compliance & security posture dashboardAnnualAnnualTwice yearlyQuarterly
Customer Trust Pack
Customer security questionnaire supportUp to 1/yearUp to 2/yearUp to 4/yearUp to 10/year
Executive reportingMonthly
Cybersecurity — Core Assurance
ServiceFoundationStandardProfessionalScale
Cybersecurity Maturity AssessmentLite
Cybersecurity Risk Assessment
Cybersecurity Risk Register
Cybersecurity PoliciesTemplatedTailoredTailoredTailored
Third-Party Vendor Risk Register
Third-party vendor exposure analysis3/year3/year
Supplier onboarding security pack
Backup & Restore posture review
Backup / DR tabletop exerciseAnnualAnnual
Backup & restore / ransomware recovery exerciseAnnual
Identity & Access Management review
MFA & privileged-access governance
Endpoint / EDR posture reviewAnnualAnnualTwice yearlyQuarterly
Dark web / credential monitoring
Firewall Security Assessment
Technical Testing & Exposure Management
ServiceFoundationStandardProfessionalScale
Vulnerability Assessment1 item/year2 items/year4 items/year4 items/year
External attack-surface monitoring
Penetration testing1/year2/year
Microsoft 365 / Google exposure review
Microsoft 365 / Google Workspace Security Assessment
Cloud Security Posture Assessment1/year2/year
Active Directory / Entra ID review
Simulated phishing testAnnualTwice yearlyQuarterlyQuarterly
Company & employee OSINT footprint
Domain & subdomain security
DNS / certificate / CA misconfiguration checks
Impersonation & brand protection – DMARC/SPF/DKIM
Exposed management interface checks
Public secrets exposure search
Awareness, Training & People
ServiceFoundationStandardProfessionalScale
Online Security Awareness Training platform
Staff awareness newsletter
Managed Cybersecurity Awareness Programme
Lunch & Learn awareness sessions1/year2/year
Role-based training – Developers, Finance, HR etc.1 role/year2 roles/year
AI literacy / staff AI awareness training
Incident Response & Resilience
ServiceFoundationStandardProfessionalScale
Incident Response & Data Breach PoliciesTemplatedTailoredTailoredTailored
Incident Response advisory support – business hoursAdd-onUp to 8 hrsUp to 16 hrsUp to 24 hrs
Incident Response runbooks12510
Incident Response Tabletop ExerciseAnnualTwice yearly
Breach notification drafting templates – DPC/ICOTemplated
Breach notification workflow & regulator communications playbook
Cyber Resilience & Business Continuity PlanAnnual reviewFull plan
Certification & Regulatory Compliance Readiness
ServiceFoundationStandardProfessionalScale
Cyber Essentials readiness & certification supportAdd-on
Cyber Essentials Plus readiness*Add-onAdd-on
Cyber Fundamentals alignment*Add-on
ISO 27001 alignment / gap analysisAdd-onAdd-on
ISO 27001 certification readiness*Add-onAdd-onAdd-on
SOC 2 readiness*Add-onAdd-onAdd-on
NIS2 / Cyber Security and Resilience Bill scoping & gap analysisAdd-onAdd-on
DORA / FCA Rules readiness – financial services*Add-onAdd-on
Other regulatory gap analysisAdd-onAdd-onAdd-onAdd-on
Readiness and alignment services support organisations in preparing for applicable standards, regulations, and certification schemes. BH Haven does not guarantee regulatory compliance or certification.
Cyber Insurance Support
ServiceFoundationStandardProfessionalScale
Cyber Insurance readiness assessment1/year1/year1/year
Cyber Insurance renewal assistance
PCI DSS — Where Applicable
ServiceFoundationStandardProfessionalScale
PCI Self-Assessment Questionnaire support
PCI DSS Assessment
PCI Vulnerability Scan
GDPR / Data Protection
ServiceFoundationStandardProfessionalScale
GDPR / Data Protection Gap AnalysisLite
GDPR / Data Protection PoliciesTemplatedTailoredTailoredTailored
ROPA development & review
ROPA annual maintenance
DPIA support1/year2/yearUp to 5/yearUp to 10/year
Transfer Impact AssessmentAdd-onAdd-onUp to 2/yearUp to 4/year
DSAR & data-subject rights procedureTemplatedTailoredTailoredTailored
Data retention & deletion process development
Cookie scan
Website Privacy Notice review
GDPR training
AI Governance
ServiceFoundationStandardProfessionalScale
AI AssessmentLite
AI PoliciesTemplatedTailoredTailoredTailored
AI inventory & shadow-AI discovery
AI Awareness Training
EU AI Act risk classification1 system/year
ISO 42001 alignment / gap analysisAdd-on
Sector-Specific Bolt-Ons
Optional serviceFoundationStandardProfessionalScale
FinTech – CBI/FCA outsourcing & operational resilienceAdd-onAdd-onAdd-onAdd-on
Healthcare – HSE/NHS supplier assurance packAdd-onAdd-onAdd-onAdd-on
Charity – OSCR/Charity Commission data-handling guidanceAdd-onAdd-onAdd-onAdd-on
SaaS/Technology – Customer due-diligence packAdd-onAdd-onAdd-onAdd-on