AI-Powered SME Cybersecurity: Human Experts Guide the Process
Introducing BH Haven, a cybersecurity service combining AI and expert oversight for SMEs in Ireland and the UK.
Overview of BH Haven
BH Consulting, an Irish cybersecurity firm, launched BH Haven, a continuous service model offering SMEs access to specialized consultants and an internal AI system for analytical tasks, evidence evaluation, and regulatory alignment. The initiative targets Ireland and the UK, with plans to expand to Nordic and European markets.
Key Features and Service Levels
BH Haven addresses compliance with GDPR, NIS2 Directive, EU AI Act, and EU Cyber Resilience Act. It provides four service levels—Foundation, Standard, Professional, and Scale—covering risk assessments, technical evaluations, incident response planning, data protection, AI governance, third-party risk management, and executive reporting.
Target Markets and Compliance Requirements
The service focuses on SMEs requiring compliance with EU regulations and stakeholder expectations. A 2025 study by Munster Technological University and Ireland’s NCSC highlighted gaps in cyber resilience among Irish SMEs, particularly in preparedness and access to expertise.
AI and Human Oversight Integration
BH Haven uses AI tools to organize and evaluate data, identify vulnerabilities, and generate preliminary reports. However, critical decisions about risk acceptability, control effectiveness, and remediation strategies remain with consultants. AI does not replace human expertise but supports it.
Human Oversight and Liability
Consultants review AI-generated findings, validate conclusions, and approve final deliverables. Brian Honan, CEO of BH Consulting, emphasized that AI integration does not shift liability from consultants. Clients must review service scope definitions, as assessments are limited to agreed parameters and available evidence.
Service Scope and Partnerships
BH Haven does not manage client infrastructure like firewalls or SOCs but focuses on governance and verification. It positions managed service providers (MSPs/MSSPs) as potential partners whose work BH Haven can independently evaluate. The service aims to provide SMEs with an independent advisor for decision-making.
Future Growth and Impact
BH Consulting anticipates creating up to 50 specialized roles over three years, combining BH Haven with existing services. The initiative addresses growing compliance demands while adapting cybersecurity solutions to SMEs’ unique needs.
“No consulting firm can guarantee absolute protection against breaches. Professional liability remains governed by contractual agreements, with AI integration not shifting responsibility from consultants,” said Brian Honan, CEO of BH Consulting.
Conclusion
BH Haven represents a tailored approach to SME cybersecurity, blending AI efficiency with expert oversight. By addressing compliance, resource constraints, and operational needs, the service aims to strengthen cyber resilience in Irish and UK SMEs while setting a precedent for scalable, specialized solutions.
