We explain IASME’s clarification of the term ‘point-in-time’ regarding the date that certification is based on.

Watch the video

We discuss perhaps the most brodly impactful change to Cyber Essentials Plus of this year: the new second sampling requirement for update management non-compliances.

Watch the video

We provide an overview of the changes to Cyber Essentials Plus, the scheme’s audited qualification.

Watch the video

We explain the new Cyber Essentials Plus rule banning major non-compliances in the VSA, how it differs from before, and the likely practical impact.

Watch the video

We explore the importance of backups in strengthening their cyber resilience.

Watch the video

We discuss the shift in focus regarding user access control and passwordless authentication options.

Watch the video

We discuss the updates to the guidance for web applications, now titled ‘Application Development’.

Watch the video

We explain the various changes to scoping criteria and how the requirements around scoping have tightened.

Watch the video

We discuss the questions that have been reclassified as ‘automatic failure questions’ in the new Danzell Question Set.

Watch the video

We break down the updates to Cyber Essentials requirements for multi-factor authentication (MFA).

Watch the video

We explain the new formal definition of a ‘cloud service’ that IASME has provided this year.

Watch the video

We provide a high-level overview of the changes to the scheme, from the new Danzell Question Set to the updated Requirements for IT Infrastructure document.

Watch the video

We share the key benefits of implementing ISO 27001 reported by organisations that have achieved certification to the Standard.

Watch the video

We share the key benefits of implementing ISO 27001 reported by organisations that have achieved certification to the Standard.

Watch the video

We break down the structure of ISO 27001, including its ‘Harmonized Structure’ used by other ISO management system standards.

Watch the video

We give a high-level overview of what ISO 27001 is, the background and intention of the Standard, and explain the concept of ISMS

Watch the video

We share the best practices that will allow you to maintain Cyber Essentials and Cyber Essentials Plus certification

Watch the video

This overview gives you a clear picture of today’s cyber risk landscape and what you can do to stay ahead.

Watch the video

This overview gives you a clear picture of today’s cyber risk landscape and what you can do to stay ahead.

Watch the video

This overview gives you a clear picture of today’s cyber risk landscape and what you can do to stay ahead.

Watch the video

This overview gives you a clear picture of today’s cyber risk landscape and what you can do to stay ahead.

Watch the video
Cyber Security
Published on
21/5/2026
Understanding Defence Cyber Certification (DCC)

URM’s blog explains how the DCC works, who needs it, the benefits of certification, with clear guidance on how to approach compliance and avoid common mistakes.

Cyber Security
Published on
21/5/2026
Cyber Security and the Board: The UK Cyber Resilience Pledge in Focus

URM’s blog explains the purpose, structure and content of the Government’s new Cyber Resilience Pledge, and what it means for organisations across the UK.

Artificial Intelligence
Published on
8/5/2026
Artificial Intelligence Frameworks and Regulations: ISO 42001, the NIST AI RMF and the EU AI Act

URM’s blog explores 3 leading AI governance frameworks and regulations, how they complement and differ & what they mean for organisations working with AI.

Information Security
Published on
6/5/2026
Certifying to ISO 27001: Key Tips for Success and Common Pitfalls to Avoid

URM’s blog outlines practical tips for a successful ISO 27001 implementation, and the common mistakes to avoid throughout the certification process.

Information Security
Published on
23/4/2026
ISO 27001 Clause 7.5: Documented Information Explained

URM’s blog breaks down ISO 27001 Clause 7.5 requirements, with practical guidance on how to achieve conformance to this Clause & what external assessors expect.

Information Security
Published on
9/4/2026
Common Issues Identified During Audits of ISO 27001:2022

URM’s blog explores common issues and areas for improvement identified during audits of organisations that have transitioned to ISO 27001:2022

Information Security
Published on
1/4/2026
ISO 27001 Clause 9.1: Monitoring, Measurement, Analysis and Evaluation Explained

URM’s blog explores ISO 27001 Clause 9.1, what it requires and practical guidance on how to implement this Clause in full conformance with the Standard.

Cyber Security
Published on
26/3/2026
Cyber Essentials Update 2026

URM’s blog breaks down key changes to the Cyber Essentials scheme coming into force on 27 April 2026, including the new Danzell Question Set.

Information Security
Published on
23/3/2026
Continuous Compliance With the PCI DSS

URM’s blog outlines how continuous compliance fits into PCI DSS, and explores practical ways to integrate requirements into business-as-usual (BAU) operations.

Information Security
Published on
20/3/2026
ISO 27001 – Clause 6.3: The Importance of Planned ISMS Change Management

URM’s blog explains the purpose & requirements of ISO 27001 Clause 6.3, types of ISMS change it covers, and key considerations when putting it into practice.

Cyber Security
Published on
10/3/2026
Cyber Security and the Board: A Sign of What’s to Come

URM’s blog explains recent amendments to the Cyber Security and Resilience Bill, how they align with broader regulatory shifts, & practical steps to prepare.

Data Protection
Published on
5/3/2026
Data Protection Interpretation Affirmed by the Court of Appeal in DSG Retail Case

URM’s blog unpacks the DSG vs. ICO case, how it reached the Court of Appeal, & the Court’s decision on the status of pseudonymised data in the hands of attacker

URM is renowned for helping organisations to achieve the optimum balance when implementing an ISMS.
Find out more
"
Everything went as planned, our consultant was very professional, displayed flexibility when needed, and his approach was greatly appreciated!
contact US

Let us help you

Let us help you in your compliance journey by completing the form and letting us know how we can best support you.