6
April 2023

URM Transitions to ISO 27001:2022

Having been certified to ISO 27001 since 2005, when the world’s foremost information security management standard was originally published, URM became one of the UK’s first organisations to transition to the latest version of the Standard (2022) in April 2023.  Lisa Dargan, Director, at URM comments “ISO 27001 has always been absolutely central to the consultancy, training services and products we offer, and we were delighted to be one of the first to transition to the 2022 version. Our experiences are proving invaluable too in helping to advise and guide others achieve a seamless transition.” Lisa adds “URM’s successful transition was testament to our approach in implementing and maintaining ISO 27001 and was also a great endorsement for our risk management software, Abriska.  The software tool is fully compatible with the new Standard, is populated with all the 2022 controls and offers a variety of transition options.”

PCI SSC Announces Changes to the SAQ A

Latest update:
11 Mar
2025

URM’s blog explains the recent update to PCI DSS SAQ-A that has resulted in the removal of 2 new v4 requirements & the additon of new eligibility criteria.

Read more
Thumbnail of the Blog Illustration
Data Protection
updateD:
7/3/2025
Are you Processing Special Category Personal Data Without Knowing It?

URM’s blog breaks down the GDPR requirements around special category personal data and how organisations can avoid processing this data inadvertently.

Read more
Thumbnail of the Blog Illustration
Information Security
updateD:
6/3/2025
ISO 27002, the Unsung Hero

URM’s blog explains what ISO 27002 is, how it can benefit your organisation, & how you can use it to support your implementation of an ISO 27001-conformant ISMS

Read more
Thumbnail of the Blog Illustration
Data Protection
updateD:
5/3/2025
How to Build Customer Trust and Loyalty Through Data Protection Best Practice

URM’s blog offers key advice and guidance on how to ensure your data processing practices facilitate not only regulatory compliance, but also customer trust.

Read more
"
It’s one thing having the required technical knowledge, it’s another thing for a consultant to apply that knowledge to the context of our organisation. To use a sporting analogy, we view cyber and information security as a marathon not a sprint. I am not a believer in doing everything all at once. Our approach has been risk based and incremental, remediating our biggest risks first before moving on. I believe this approach is far more sustainable and effective. And URM’s consultants fully understand this and are very pragmatic and tailored in their guidance and advice. They know we are not implementing ISO 27001 purely for the certificate, but more as a framework for continual improvement, and at a pace where new systems and processes can be fully understood and absorbed by our team and be business as usual.
The Owners and Distributors of Quality Brands
contact US

Let us help you

Let us help you in your compliance journey by completing the form and letting us know how we can best support you.