Blue Haven

Business risk & resilience advisory

You cannot managewhat you cannot see.

Blue Haven identifies risk, weakness and exposure across the whole business, then turns what we find into practical action.

See the whole business

What Blue Haven can help with

See the whole business.
Know what needs attention.

Blue Haven identifies exposure across the business, helps address what sits within our competence, and brings in specialist expertise where required.

01People02Customers & Commercial03Suppliers & Third Parties04Systems & Technology05Data & Information06Digital & Public Presence07Premises & Physical Operations08Contracts & Commitments09Continuity & Recovery10Governance & Oversight

Blue Haven examines ten connected areas of the business and provides a clear view of where exposure sits, what needs attention and where specialist expertise is required.

Ways into the system

Begin where the need is clearest.

Four entry points into one connected risk and resilience capability.

01 · Start with immediate exposure

A focused view of the dependencies most likely to create immediate exposure.

£595
04 · Keep the risk position live

A recurring managed service that keeps the risk position live, reviewed, monitored and supported over time.

Ongoing
Prefer to manage risk internally?

Manage risk and resilience internally with Reggie, the Blue Haven platform. Included with Managed Risk & Resilience, or available as a standalone subscription priced by organisation size.

Explore Reggie ↓

Move closer

One weakness rarely stays in one place.

Risk travels through the same relationships that make the business work.

DependencyDisruptionConsequence
P-01 · illustrative example

One person holds critical knowledge.

Delivery, decisions and recovery slow at once.

S-04 · illustrative example

One supplier cannot be replaced quickly.

A third-party issue becomes your operational issue.

T-07 · illustrative example

One system can stop the operation.

A single failure moves through every dependent team.

Hidden dependency

One weakness rarely stays in one place.

Risk travels through the same relationships that make the business work.

Move through the business
01 / 03P-01 · illustrative example

One person holds critical knowledge.

Delivery, decisions and recovery slow at once.

02 / 03S-04 · illustrative example

One supplier cannot be replaced quickly.

A third-party issue becomes your operational issue.

03 / 03T-07 · illustrative example

One system can stop the operation.

A single failure moves through every dependent team.

Risk propagation

One dependency can move through the whole operation.

DependencyDisruptionConsequence

Hidden business dependencies and propagated risk

  • One person holds critical knowledge. Delivery, decisions and recovery slow at once.
  • One supplier cannot be replaced quickly. A third-party issue becomes your operational issue.
  • One system can stop the operation. A single failure moves through every dependent team.

The Blue Haven Method

Disorderbecomescontrol.

The Blue Haven Method

Disorder becomes control.

One live risk record moves through Map, Test, Rank, Act and Sustain.

The Blue Haven Method

01

Map

See the business as one connected system.

02

Test

Ask what fails first, then trace the consequence.

03

Rank

Compare residual risk by evidence and consequence.

04

Act

Attach ownership, action and timing to the risk.

05

Sustain

Keep evidence, action and review current.

The method runs on Reggie

Structure is the intervention.

Every risk follows the same structured record.

R-05 · Supplier dependencyDefined during MapFailure path testedHighest priorityControlled actionLive monitored risk

Single-source supplier dependency

One critical component has no tested alternative at operating volume.

Secondary source approved and monitoring remains active.

Residual risk 8246
PeopleSystemsSuppliersCustomersDataOperations
Move through the Method

If this stopped tomorrow, what fails first?

01Supplier stops02Operations slow03Customer delivery slips
01Single-source supplier dependency8202Core system outage7603Customer concentration6404Knowledge concentration55
OwnerCOODue14 SepActionValidate alternative supplierStatusOpen
Alternative tested at volumeSecondary source approved82→46Residual risk reducedMonitoring remains active

This risk is now inside Reggie

R-05 · Live recordEvidence · LinkedOwner · COOReview · 14 Dec
ComplexityObservationRiskEvidencePriorityActionOwnerMonitored

The Blue Haven method

Disorder is the starting condition, not a method stage. The same single-source supplier dependency then moves through every stage.

  1. Map. R-05 becomes a defined risk record.
  2. Test. If the supplier stops, operations slow and customer delivery slips.
  3. Rank. Its residual risk score of 82 makes it the highest-priority risk.
  4. Act. The COO owns an open action to validate an alternative supplier by 14 September.
  5. Sustain. The alternative is tested, a secondary source is approved and the residual risk score reduces from 82 to 46. The risk remains monitored with its next review on 14 December.

The method runs on Reggie: structure is the intervention. Every risk follows the same structured record model of complexity, observation, risk, evidence, priority, action, owner and monitored.

01 · Blue Haven identifies

Exposure becomes visible.

The Review examines ten connected areas and documents what the business depends on.

01

People

Key-person dependency, concentrated knowledge, succession and critical access.

02

Customers & Commercial

Revenue concentration, major-client dependency, contract pressure and sales dependency.

03

Suppliers & Third Parties

Single-source suppliers, substitutability, lead times and third-party dependency.

04

Systems & Technology

Business-critical systems, access, recovery and provider dependency.

05

Data & Information

Critical information, where it lives, who can access it and the recovery position.

06

Digital & Public Presence

Domain ownership, website access, email, public reputation and platform dependency.

07

Premises & Physical Operations

Site dependency, utilities, plant, equipment and relocation exposure.

08

Contracts & Commitments

Termination points, concentration of obligation, renewal cliffs and commercial exposure.

09

Continuity & Recovery

Whether plans exist, whether they work and how quickly the business can recover.

10

Governance & Oversight

Who owns risk, what leadership sees and whether incidents and change are properly controlled.

What you leave with

A practical record of the business risk position.

01Dependency map02Prioritised risk register03Evidence log04Clear view of where exposure sits05Named risk owners06Agreed actions and target dates07Management summary08Specialist referrals where required09Renewal-readiness notes where relevant10Review / monitoring priorities

02 · Blue Haven improves

Where we can help, we act.

Findings move into practical work with owners, dates and visible progress.

01

Business continuity planning

Build, update and test practical continuity plans around the risks identified.

02

Critical process documentation

Turn knowledge held by individuals into controlled, usable process documentation.

03

Risk ownership and accountability

Define who owns each material risk, action and review date.

04

Supplier contingency planning

Work through alternatives, lead times, dependencies and practical fallback arrangements.

05

Customer concentration planning

Map the commercial exposure and agree practical actions to reduce dependency.

06

Action planning

Turn findings into prioritised actions with named owners, dates and measurable outcomes.

07

Management reporting

Give leadership a current, practical view of exposure and progress.

08

Incident review

Review what happened, what failed, what was learned and what should change.

09

Internal control design

Strengthen practical controls around identified operational weaknesses within our competence.

10

Ongoing monitoring

Keep the register, evidence, actions and review position current through Managed Risk & Resilience.

Findingsbecomeactions.

Where the work sits within Blue Haven's competence, we can help deliver it directly and keep progress visible inside the live risk record.

FindingSupplier concentrationEvidence · one critical source
ActionValidate alternative supplierOwnerCOODue14 Sep
FindingKey-person dependencyEvidence · process held by one person
ActionDocument critical processOwnerOperationsStatusOpen
FindingSystem dependencyEvidence · recovery remains untested
ActionTest recovery processOwnerITReviewScheduled

03 · Blue Haven connects specialist support

We identify the issue. The right specialist handles the specialist work.

Some risks require professional expertise outside Blue Haven's scope. We identify where that expertise is required, help the client understand why, and keep the resulting action connected to the wider risk position where appropriate.

01Insurance02Legal03Cyber Security04IT05HR06Health & Safety07Data Protection08Accountancy

Blue Haven

IdentifiesDocumentsPrioritisesCoordinatesTracks

Specialist

AdvisesCertifiesImplements specialist workProvides regulated or professionally reserved expertise
01Blue Haven identifies02Specialist advises or delivers03Action remains visible04Blue Haven continues to track the risk where appropriate

Blue Haven provides a dependency map, evidence log, prioritised risk register and a clear view of where exposure sits. Findings can become directly supported actions within Blue Haven's competence. Where specialist expertise is required, the action remains connected to the wider risk position and Blue Haven continues to track it where appropriate.

Long-standing relationships.

Testimonials from businesses Amy and Wayne have supported professionally over many years.

Having worked with Amy for over 15 years, I can say she is an absolute diamond. Nothing is ever too much trouble. She is always at the end of the phone to help and has supported our businesses consistently over many years.
MajFlexii Car and Van Rental Ltd & HQH
Amy has consistently gone above and beyond to understand our requirements. She is approachable, responsive and always willing to go the extra mile. She has been a tremendous support to our business over the years.
JayRunway London & M21 Automotive
I have worked with Amy for over 15 years and have always found her professional, trustworthy and genuinely committed to providing an excellent service. I particularly value her honest, straightforward approach and the care and attention she gives to her clients.
MikeA&M Car Sales Ltd
Wayne has completely transformed the way Hackles & Co operates. He took the time to understand how our business actually works and built the website and CRM around the real day-to-day problems in recruitment. Everything now works together in one place and has given the business a level of infrastructure I didn’t expect when we started. I’ve used loads of CRMs over the years and Orbit is the most efficient system I’ve worked with in my career.
RobHackles & Co Ltd
Over the last 10 years I’ve trusted Wayne with several businesses, often putting him in charge of getting them built and working properly before moving him onto the next one. He understands how businesses need to operate and has always been someone I can rely on to get things moving.
DamonBusiness Owner & Entrepreneur
Wayne carried out a full review of our online presence and then rebuilt the website, branding, Google Business Profile and SEO. He picked up issues we hadn’t spotted and gave DR Access a much stronger, more professional presence.
DanDR Access Ltd

Managed Risk & Resilience · the ongoing service

The risk position moves.
Blue Haven moves with it.

Illustrative example
New observation

Supplier dependency added from review notes

Live
AI structured

Evidence linked and category suggested

Live
Human reviewed

Consequence and priority approved

Live
Action moved

Secondary supplier test assigned to Operations

Live
Status improved

Control evidence accepted; exposure reduced

Live
01Information arrives02AI structures03Evidence links04Draft forms05Human sign-off Approved06System updates
Reggie + AI-assisted delivery + human judgement

Reggie connects risks, evidence, actions and reviews. Technology handles the repeatable work. Accountability remains visible.

Managed Risk & Resilience · the ongoing service

The risk position moves.
Blue Haven moves with it.

Illustrative exampleNew observation

Supplier dependency added from review notes

Live
AI structured

Evidence linked and category suggested

Live
Human reviewed

Consequence and priority approved

Live
Action moved

Secondary supplier test assigned to Operations

Live
Status improved

Control evidence accepted; exposure reduced

Live

Reggie · connected risks, evidence, actions and reviews

Technology handles the repeatable work.
Accountability remains visible.

01Information arrives02AI structures03Evidence links04Draft forms05Human sign-offApproved06System updates

Managed Risk and Resilience keeps risks, evidence, actions and reviews current. AI structures information and repetitive process; people approve judgement and remain accountable. The activity timeline shown is an illustrative example, not live client data.

The Blue Haven platform

Reggie

One platform.
One live view.

Why manage risk across disconnected apps, subscriptions and spreadsheets when the whole picture can live in one place?

Reggie is Blue Haven’s connected business risk and resilience platform, bringing the day-to-day work of risk and resilience together in one place. Instead of jumping between separate tools, chasing updates across spreadsheets and piecing together evidence from different systems, you can keep the position live, owned and visible.

See what needs attention now. Keep the risk register current. Track what changes. Keep actions moving. Retain the evidence behind decisions. Give the right people a clear view without building another reporting process around the reporting process.

Less fragmentation. Less duplication. A clearer picture of the business.

Included with Managed Risk & Resilience, or available as a standalone subscription. Organisation-based pricing. No per-user licence model.

Explore ReggieReggie product overview

Who you work with

Two people. One view of the business.

Amy Wootton, Founder & CEO at Blue Haven
Amy WoottonFounder & CEORisk Management & Business Assurance
Wayne Scott-Fox, Co-Founder & Director of AI & Digital Innovation at Blue Haven
Wayne Scott-FoxCo-Founder & Director of AI & Digital InnovationAI Systems, Digital & Online Risk

Blue Haven is led by Founder Amy Wootton and Co-Founder Wayne Scott-Fox. Together, they bring practical business, commercial, operational and risk experience into one joined-up view of the organisation.

Their approach is built around understanding how the business actually operates, where exposure or weakness exists, what needs attention and when specialist expertise should be brought into the picture.

The result is a broader view than any single discipline can provide, while regulated or specialist work remains with the appropriate professional.

One business. One view. The right expertise where it’s needed.

Blue Haven Business Advisory

The view resolves here

See your business differently.

Blue Haven gives established businesses a clear view of the risks they cannot afford to leave unseen.

Start the conversation

Tell us what you are trying to understand, improve or protect. We can take it from there.