Quiz

URM's blog explores how to build an effective ISO 27001 Statement of Applicability, from documenting controls and justifications to audit readiness.

URM's blog explores the growing challenge of shadow AI, the risks it presents to organisations, and practical steps to improve governance and control.

URM's blog outlines the data protection, information security and governance considerations for organisations adopting BYOD arrangements.

URM's blog explores the essentials of third-party risk management, covering supplier due diligence, assurance, monitoring and offboarding.

URM's blog explores ISO 27001 Clause 7.2, explaining how to define, assess and evidence competence to support conformance and ISMS effectiveness.

URM's blog explores the growing use of AI agents and agentic AI, the risks they introduce, and how organisations can govern them responsibly.

URM's blog examines ISO 27001:2022 Clause 4.2, covering interested parties, their requirements and how these are addressed through the ISMS.

URM's blog explores ISO 27001 Clause 4.1 & how to identify organisational context, assess internal/external issues, and support effective ISMS decision-making.

URM's blog examines how the ISO 42001 management system requirements differ from ISO 27001, and the impact this has on what auditors will expect to see.

URM's blog explores common personal data retention mistakes, UK GDPR requirements for data retention & practical steps to reduce compliance and security risks.

URM’s blog explores ISO 27001 Clause 9.1, what it requires and practical guidance on how to implement this Clause in full conformance with the Standard.

URM’s blog explores five key actions organisations can take to strengthen their ISO 27001 information risk management processes.