We explain IASME’s clarification of the term ‘point-in-time’ regarding the date that certification is based on.

Watch the video

We discuss perhaps the most brodly impactful change to Cyber Essentials Plus of this year: the new second sampling requirement for update management non-compliances.

Watch the video

We explain the new Cyber Essentials Plus rule banning major non-compliances in the VSA, how it differs from before, and the likely practical impact.

Watch the video

We discuss the shift in focus regarding user access control and passwordless authentication options.

Watch the video

We discuss the updates to the guidance for web applications, now titled ‘Application Development’.

Watch the video

We explain the various changes to scoping criteria and how the requirements around scoping have tightened.

Watch the video

We discuss the questions that have been reclassified as ‘automatic failure questions’ in the new Danzell Question Set.

Watch the video

We break down the updates to Cyber Essentials requirements for multi-factor authentication (MFA).

Watch the video

We explain the new formal definition of a ‘cloud service’ that IASME has provided this year.

Watch the video

We provide a high-level overview of the changes to the scheme, from the new Danzell Question Set to the updated Requirements for IT Infrastructure document.

Watch the video

We share the key benefits of implementing ISO 27001 reported by organisations that have achieved certification to the Standard.

Watch the video

We share the key benefits of implementing ISO 27001 reported by organisations that have achieved certification to the Standard.

Watch the video

We break down the structure of ISO 27001, including its ‘Harmonized Structure’ used by other ISO management system standards.

Watch the video

We give a high-level overview of what ISO 27001 is, the background and intention of the Standard, and explain the concept of ISMS

Watch the video

We share the best practices that will allow you to maintain Cyber Essentials and Cyber Essentials Plus certification

Watch the video

This overview gives you a clear picture of today’s cyber risk landscape and what you can do to stay ahead.

Watch the video

This overview gives you a clear picture of today’s cyber risk landscape and what you can do to stay ahead.

Watch the video

This overview gives you a clear picture of today’s cyber risk landscape and what you can do to stay ahead.

Watch the video

This overview gives you a clear picture of today’s cyber risk landscape and what you can do to stay ahead.

Watch the video
Information Security
Published on
23/10/2026
Third-Party Risk Management: Could Your Suppliers Be Your Biggest Information Security Risk?

URM's blog explores the essentials of third-party risk management, covering supplier due diligence, assurance, monitoring and offboarding.

Information Security
Published on
16/10/2026
ISO 27001 Clause 7.2 - Competence

URM's blog explores ISO 27001 Clause 7.2, explaining how to define, assess and evidence competence to support conformance and ISMS effectiveness.

Artificial Intelligence
Published on
9/10/2026
Governing Agentic AI: Practical Steps for Managing AI Agents Safely

URM's blog explores the growing use of AI agents and agentic AI, the risks they introduce, and how organisations can govern them responsibly.

Information Security
Published on
2/10/2026
ISO 27001 Clause 4.2, Understanding the Needs and Expectations of Interested Parties

URM's blog examines ISO 27001:2022 Clause 4.2, covering interested parties, their requirements and how these are addressed through the ISMS.

Information Security
Published on
21/9/2026
ISO 27001 Clause 4.1 - Understanding the Organisation and its Context

URM's blog explores ISO 27001 Clause 4.1 & how to identify organisational context, assess internal/external issues, and support effective ISMS decision-making.

Information Security
Published on
28/8/2026
Auditing ISO 42001: Its Unique Requirements and Key Differences From ISO 27001

URM's blog examines how the ISO 42001 management system requirements differ from ISO 27001, and the impact this has on what auditors will expect to see.

Data Protection
Published on
21/8/2026
Retention of Personal Data in the UK: Common Pitfalls and How to Avoid Them

URM's blog explores common personal data retention mistakes, UK GDPR requirements for data retention & practical steps to reduce compliance and security risks.

Information Security
Published on
13/8/2026
ISO 27001 Clause 9.1: Monitoring, Measurement, Analysis and Evaluation Explained

URM’s blog explores ISO 27001 Clause 9.1, what it requires and practical guidance on how to implement this Clause in full conformance with the Standard.

Information Security
Published on
7/8/2026
5 Must-Dos of Effective ISO 27001 Risk Management

URM’s blog explores five key actions organisations can take to strengthen their ISO 27001 information risk management processes.

Information Security
Published on
30/7/2026
ISO 27001 Clause 7.4: Communication

URM’s blog explains ISO 27001 communications requirements, their links to interested parties, & how both can be addressed through a single framework.

Information Security
Published on
17/7/2026
The Subtleties of Scheduled Tasks in PCI DSS

URM’s blog explores the nuances and challenges of PCI DSS scheduled activities and practical approaches for improving compliance with periodic requirements.

Information Security
Published on
14/7/2026
The Fundamentals of Risk Management in ISO 27001

URM’s blog explains the risk management requirements in ISO 27001, including identifying ISMS risk, risk assessment and treatment, documentation and more

Should it be required, we can also manage your full ISO 27001 internal audit process and would welcome the opportunity to discuss your requirements with you.
Find out more
"
We want to pass on our thanks to our URM assessor for helping us with the assessment. He made it really very straightforward for us during the remote sessions and during the follow ups to understand what we needed to do to remediate the issues and obtain the certification. He understood our setup and gave us relevant advice, it was a pleasure working with him.
contact US

Let us help you

Let us help you in your compliance journey by completing the form and letting us know how we can best support you.