Experts in Information
Security

TRUSTED SERVICES
CREST LogoPen Test LogoOVS Mobile LogoOVS Apps Logo
PCI DSS CertificationBSI CertificationBSI Certification

ISO 27001
Consultancy
and Auditing

Guaranteed ISO 27001 certification
Tailored ISMS implementation
Highly skilled auditors
Find out more

GDPR Consultancy
and Training Specialist

Pragmatic and tailored
approach to GDPR compliance
Find out more

Leading PCI QSA
Company

Pragmatic and tailored
approach to PCI DSS
compliance
Find out more

Trusted and
Accredited
Penetration Testing

Maximising the benefits from your pen testing. Assessment tailored to your organisation’s needs. Free retest of high or critical vulnerabilities.
Find out more

URM makes
Cyber Essentials
certification easy

Achieve Cyber Essentials and Cyber Essentials Plus certification with our team of qualified experts.
Find out more

Team of Experienced
SOC 2 Consultants

If you need to comply, attest, or prepare for
a SOC 2 report (be that Type 1 or Type 2)
URM provides a full range of services.
Find out more

URM Consulting Services (URM)

URM Consulting Services (URM) is dedicated to providing high quality, cost-effective and tailored consultancy and training in the areas of cyber and information security, data protection, business continuity and risk management.

URM's mission, through its consultancy, cyber testing, auditing and training services, along with risk management software (Abriska), is to assist you achieve the levels of information security, data protection and business continuity which are commensurate with the objectives and culture of your organisation, and which also meet international standards, regulations/legislation and recognised best practice.

Having assisted over 400 organisations achieve ISO 27001 certification, URM is ideally placed to help you certify your information security management system against the Standard or transition from the 2013 version of the Standard to the 2022 version.

Find out more

URM's services include conducting data protection impact assessments (DPIAs), developing records of processing activities (ROPAs) and conducting data subject access request (DSAR) redactions.

Find out more

URM’s qualified security assessors (QSAs) pride themselves on their pragmatic approach to both compliance and assessments and will work with you to find the most appropriate and sensible way for you to meet the requirements of the Standard, including v4.0.

Find out more

As an accredited Cyber Advisor (Cyber Essentials) and Certification Body, URM is ideally placed to provide you with reliable and cost effective cyber security advice and help you achieve Cyber Essentials and Cyber Essentials Plus certification.

Find out more

As a CREST-accredited organisation, URM is able to provide penetration testing services against all assets associated with your organisation, location or service, e.g., external and internal networks, cloud environments, web or mobile applications.

Find out more

If you’re looking to understand whether SOC 2 is the right approach for you, what efforts are required to comply or attest, or prepare for a SOC 2 report (be that Type 1 or Type 2), URM can provide you with a full range of services.

Find out more

Smarter Technologies

With the support of URM’s responsive, knowledgeable, and approachable team, the company has implemented robust, sustainable practices that align with its operational goals and values.

Read more

Bollin Group

URM provided Bollin Group with comprehensive support in strengthening its cyber and information security posture. This included providing expert guidance in relation to governance, risk management, and compliance, helping Bollin Group achieve Cyber Essentials certification and ISO 27001 certification. URM's consultants took a pragmatic, risk-based approach, ensuring that security measures were embedded seamlessly into business operations at a sustainable pace. Their tailored advice, combined with the two organisations’ shared values of integrity and corporate responsibility, fostered a strong partnership which enabled Bollin Group to enhance its resilience against cyber threats while maintaining operational efficiency.

Read more
Our experts are the ones to trust
when it comes to your cyber security
CREST LogoPen Test LogoOVS Mobile LogoOVS Apps Logo
PCI DSS CertificationBSI CertificationBSI Certification
Webinar

Cyber Essentials and Cyber Essentials Plus: Understanding the 2026 Changes to the Scheme

11:00 am
,
Wednesday
18
March
2026

Our experienced Cyber Essentials and Cyber Essentials Plus assessors will explain the scheme, its requirements, what the upcoming changes mean in practice.

Read more
USB stick, Padlock, Keys
Webinar

How to Achieve ISO 27001 Certification

11:00 am
,
Wednesday
22
April
2026

Learn how to achieve ISO 27001:2022 certification with guidance from URM and BSI. Understand key steps, benefits, and common pitfalls in implementing an effective ISMS.

Read more
USB stick, Padlock, Keys

Data Protection Interpretation Affirmed by the Court of Appeal in DSG Retail Case

Stuart Skelly
|
Senior Consultant at URM
Published
05
March
2026

URM’s blog unpacks the DSG vs. ICO case, how it reached the Court of Appeal, & the Court’s decision on the status of pseudonymised data in the hands of attacker

Read more
Thumbnail of the Blog Illustration
Information Security
Published
20/2/2026
Information Security Risk Assessment and Treatment: Understanding Relevant Risks

URM’s blog explains the building blocks of information security risk, outlining how risks can be valued and prioritised, the role of rise appetite, and more.

Read more
Thumbnail of the Blog Illustration
Data Protection
Published
16/2/2026
Managing DSARs and Other Data Subject Rights

URM’s blog explores how DSARs can be used to drive improvements, and share our insights on managing other data subject rights efficiently and effectively.

Read more
Thumbnail of the Blog Illustration
Cyber Security
Published
12/2/2026
NHS Cyber Security Open Letter: What Does it Mean for Suppliers?

URM’s blog explains the recent open letter to suppliers issued by the NHS, what it means, why it matters, and the practical steps you can take to prepare.

Read more
"
Our partnership with URM has been outstanding. From supporting us with our own Cyber Essentials certification to assisting our customers with Cyber Essentials, ISO 27001, and virtual CISO services, URM consistently delivers exceptional service. Their expertise, open communication, and ability to allocate the right expert resources for specific requirements makes every project seamless. We highly value their support and look forward to continuing our collaboration.