Blair Carlisle
Blair Carlisle is a privately held Columbus, Ohio-based advisory firm delivering senior-practitioner cybersecurity, compliance, IT risk, and AI governance services — including SOC 2, ISO 27001, HIPAA, fractional CISO leadership, and NIST AI RMF-aligned AI governance — to enterprises, mid-market firms, PE portfolios, and startups across at least ten verticals.
- Company typePrivate
- Founded1998
- HeadquartersColumbus, United States
- Headcount1–10
- GTM typeB2B
- OfferingServices
What Blair Carlisle does
Blair Carlisle (legal entity BCLH Holdings, Inc.) is a privately held cybersecurity, IT risk, compliance, and AI advisory firm headquartered at 1554 Polaris Pkwy #325 in Columbus, Ohio. The firm traces its origins to CEO Pete Rife founding Zero One Communications in the early 1990s, reorganizing as Rife Consulting Group in 1998, and rebranding as Blair Carlisle in 2020 alongside the launch of its AI advisory capabilities. It operates with approximately 13 senior practitioners and a senior-practitioner staffing model in which principals are placed on every engagement.
The firm's service portfolio is organized around five practice areas: AI Advisory & Governance (the flagship, covering AI Readiness & Strategy, Governance & Risk, Security Assessment, Agentic AI & Automation, AI Transformation, and AI Infrastructure); Assurance (SOC 1 / SOC 2 & ISO 27001 readiness and audit support, delivered with CPA firm partner Holbrook & Manter and the Fieldguide audit automation platform); Leadership (fractional CIO, CISO, and CTO retainers); Operations (managed IT and security operations including identity, endpoint, M365, and incident response); and Risk & Privacy (risk assessments mapped to NIST CSF, NIST 800-171, CIS Controls; penetration testing; HIPAA/HITECH, GDPR, PCI-DSS, and CCPA/CPRA compliance). It also publishes a free in-browser AI Readiness Assessment scored against the four NIST AI RMF functions (Govern, Map, Measure, Manage) as a top-of-funnel lead-generation tool.
Blair Carlisle sells exclusively through a consultation-led, senior-advisor sales motion with no self-serve or product-led channel; engagements begin with a free consultation and discovery call and are typically multi-year contracts priced on scope and senior-practitioner hours. Its customer base spans at least ten verticals (Private Equity Portfolios, Healthcare & TPAs, Software & SaaS, Fintech, AI & Machine Learning, Tech Startups, Managed Service Providers, Professional Services, Higher Education, Blockchain & Crypto) and ranges from Fortune 500 enterprises to Silicon Valley startups. The firm has guided "hundreds of service organizations" through SOC 1 and SOC 2 audits and operates production AI systems in its own practice that it leverages as a credibility asset for AI governance advisory.
Blair Carlisle firmographics
Firmographics- Name
- Blair Carlisle
- Legal name
- BCLH Holdings, Inc.
- Website
- https://blaircarlisle.com
- Company type
- Private
- Founded year
- 1998
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Blair Carlisle is a privately held Columbus, Ohio-based advisory firm delivering senior-practitioner cybersecurity, compliance, IT risk, and AI governance services — including SOC 2, ISO 27001, HIPAA, fractional CISO leadership, and NIST AI RMF-aligned AI governance — to enterprises, mid-market firms, PE portfolios, and startups across at least ten verticals.
- Ownership category
- akta.pro rank
Where Blair Carlisle is headquartered
LocationHeadquarters
- HQ city
- Columbus
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Blair Carlisle business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Marketing or Sales, Technology or R&D
Revenue model
- Cybersecurity Advisory Services: Professional services revenue from security risk assessments, penetration testing, SOC 1/SOC 2 readiness and audit support, ISO 27001 certifications, and HIPAA compliance services. Delivered by senior practitioners on fractional or project basis.
- AI Advisory & Governance: AI strategy, readiness assessments, governance programs, and agentic AI deployment services. Includes NIST AI RMF and ISO 42001 aligned governance programs for regulated environments.
- Fractional Executive Leadership: Fractional CIO, CISO, and CTO services providing senior technology leadership on retainer or part-time basis. Strategy, board reporting, vendor management, and program execution.
- Managed IT & Security Operations: Full-scope managed IT and security operations for organizations in transition, including identity, endpoint, M365 administration, and incident response.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Free consultation and discovery call |
| Other | Multi-year contract | Quote-based professional services |
Go-to-market motion2 records
Distribution channels2 records
Marketing channels4 records
Blair Carlisle product offering
Product offeringCore offering
Blair Carlisle is a cybersecurity, IT risk, compliance, and AI advisory firm delivering senior-practitioner-led engagements. Core offerings include SOC 1/SOC 2 and ISO 27001 readiness and audit support, fractional CIO/CISO/CTO leadership, IT and security operations, penetration testing, risk assessments, HIPAA/PCI-DSS/privacy compliance, and a flagship AI Advisory and Governance practice covering AI readiness, governance, security assessment, agentic automation, transformation, and infrastructure advisory.
Product overview
Blair Carlisle is a cybersecurity, IT risk, compliance, and AI advisory firm offering a portfolio of advisory services organized around five core practice areas: AI Advisory & Governance (the flagship practice covering AI readiness, strategy, governance, security, agentic automation, transformation, and infrastructure advisory), Assurance services (SOC 1/SOC 2 & ISO 27001 readiness and audit support using the Fieldguide platform), Leadership services (fractional CIO, CISO & CTO), Operations (IT & Security Operations), and Risk & Privacy services (Risk Assessments, Penetration Testing, and Privacy & Compliance). The AI Readiness Assessment is offered as a free directional tool.
Differentiator
Problem solved
Functional benefit
Products and services
- AI Advisory & Governance Flagship AI advisory practice for organizations deploying or governing AI systems, offering AI readiness and strategy, governance and risk programs aligned to NIST AI RMF and ISO 42001, security assessments of LLM applications and AI vendors, agentic AI and automation design and deployment, AI transformation advisory, and AI infrastructure architecture and procurement guidance. Targeted at regulated industries including healthcare, fintech, and SaaS companies.
- SOC 1 / SOC 2 & ISO 27001 Readiness and Audit Support Readiness assessments and audit support for SOC 1 Type I & II, SOC 2 Type I & II, ISO 27001, and ISO 42001, delivered in partnership with CPA firm partners using the Fieldguide audit automation platform. Targeted at SaaS companies, fintech firms, healthcare organizations, and PE-backed companies needing customer-trusted security posture.
- Fractional CIO, CISO & CTO Senior technology, security, and engineering leadership on a fractional basis providing strategy, board reporting, vendor management, and program execution for organizations that need executive-level leadership without the cost of a full-time hire. Targeted at growth-stage tech startups, mid-market companies, and organizations in transition.
- IT & Security Operations
- Risk Assessments
- Penetration Testing
- Privacy & Compliance
Quantifiable outcome
- Hundreds of service organizations guided through SOC 1 and SOC 2 audits
- +1 more outcomes
Companies that use Blair Carlisle
Customer profileNamed customers7 records
Segments10 records
Ideal customer profiles6 records
Blair Carlisle technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability5 records
Feature2 records
Blair Carlisle partnerships and signals
Strategic signalPartnerships
Two partnerships are on record, tiered core.
- FieldguidecoreModern audit automation platform used in partnership with Blair Carlisle's CPA firm partners for SOC 1 and SOC 2 audit engagements. Blair Carlisle scopes, prepares, and supports clients through control design to final report using the Fieldguide platform.
- Holbrook & Manter CPAscoreCPA firm partner for SOC 1/SOC 2 audit services. Stephen Smith (Director of Strategy) and Brian Ravencraft (Director of Finance) are principals at both Blair Carlisle and Holbrook & Manter, creating integrated advisory and audit capability.
Scale indicators4 records
Recent moves7 records
Expansion highlights5 records
Blair Carlisle competitors and assessment
Company assessmentBroad incumbents
- Optiv: Optiv is a large cybersecurity solutions integrator providing advisory, managed security services, and risk management. Comparable to Blair Carlisle's IT & Security Operations and risk assessment practices, but operating at significantly larger scale across enterprise clients.
- NCC Group: NCC Group is a global cybersecurity advisory and assurance firm offering penetration testing, risk consulting, and compliance services. Comparable to Blair Carlisle's offensive security, risk assessment, and assurance practices, with broader geographic reach and larger headcount.
- KPMG Cyber Risk Services: KPMG is a Big 4 firm with a broad cybersecurity, risk, and compliance practice covering SOC audits, ISO certifications, AI governance, and risk advisory. Blair Carlisle explicitly positions against Big 4 firms by emphasizing senior-practitioner staffing over scale.
Emerging players
- Laika: Laika is a compliance automation platform combining software with in-house SOC 2 audit expertise for SaaS companies. Represents the tech-enabled, software-augmented model that pressures traditional advisory firms like Blair Carlisle in the SOC 2 market.
Direct peers
- Schellman & Co. Schellman is a top-tier SOC 2, ISO 27001, and cybersecurity compliance advisory firm offering readiness assessments and audit support. It is one of the closest direct competitors to Blair Carlisle's core assurance practice, particularly for SaaS and technology clients pursuing SOC 2 Type II.
- TrustedSec: TrustedSec is a cybersecurity consulting firm offering penetration testing, risk assessments, incident response, and advisory services. Comparable to Blair Carlisle's offensive security and risk assessment practices with similar mid-market and enterprise client focus.
- A-LIGN: A-LIGN is a cybersecurity compliance and audit firm specializing in SOC 2, ISO 27001, PCI, HITRUST, and FedRAMP. Its tech-enabled audit delivery model directly competes with Blair Carlisle's SOC audit practice, including similar SaaS and fintech client segments.
- Linford & Co. Linford & Co. is a boutique CPA-led firm specializing in SOC 2 and SOC 1 audits for SaaS and technology companies. Direct comparable to Blair Carlisle's assurance practice for early-stage to mid-market SaaS SOC 2 engagements.
- Coalfire: Coalfire provides cybersecurity advisory, risk assessments, penetration testing, and compliance services across SOC 2, ISO 27001, HIPAA, PCI-DSS, and FedRAMP. Overlap with Blair Carlisle spans SOC readiness, penetration testing, risk assessments, and regulated-industry compliance.
Others
- Holbrook & Manter CPAs: Holbrook & Manter is a CPA firm providing audit, tax, and business advisory services, including the SOC audit delivery arm integrated with Blair Carlisle. Not a competitor but a strategic partner with shared principals (Stephen Smith and Brian Ravencraft).
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights7 records
Customer concentration
Blair Carlisle social profiles
Digital presenceBlair Carlisle compliance and trust
Trust signalCompliance12 records
Blair Carlisle financial estimates
Financial estimateRevenue estimate
Valuation estimate
Blair Carlisle leadership team
Management profileNumber of profiles
Profiles13 records
Blair Carlisle funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Blair Carlisle M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Blair Carlisle
What does Blair Carlisle do?
Blair Carlisle is a cybersecurity, IT risk, compliance, and AI advisory firm delivering senior-practitioner-led engagements. Core offerings include SOC 1/SOC 2 and ISO 27001 readiness and audit support, fractional CIO/CISO/CTO leadership, IT and security operations, penetration testing, risk assessments, HIPAA/PCI-DSS/privacy compliance, and a flagship AI Advisory and Governance practice covering AI readiness, governance, security assessment, agentic automation, transformation, and infrastructure advisory.
Is Blair Carlisle a public or private company?
Blair Carlisle is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Blair Carlisle founded?
Blair Carlisle was founded in 1998. It employs 1 to 10 people.
Where is Blair Carlisle based?
Blair Carlisle is headquartered in Columbus, United States, in the North America region.
How does Blair Carlisle make money?
Four revenue lines are on record. Cybersecurity Advisory Services are the primary driver. The others are AI Advisory & Governance, fractional Executive Leadership and managed IT & Security Operations.
Who are Blair Carlisle's main competitors?
Broad incumbents on record are Optiv, NCC Group and KPMG Cyber Risk Services. Laika is listed as an emerging player. Direct peers are Schellman & Co., TrustedSec, A-LIGN, Linford & Co. and Coalfire. Holbrook & Manter CPAs is listed as an others.
Does Blair Carlisle have an API?
No public API is recorded for Blair Carlisle.