Blog
Recent blogs

Artificial Intelligence Frameworks and Regulations: ISO 42001, the NIST AI RMF and the EU AI Act
Published on
08
May
2026
TRENDING
URM’s blog explores 3 leading AI governance frameworks and regulations, how they complement and differ & what they mean for organisations working with AI.
Read more
Information Security
Published on
10/7/2024
A Guide to the Certificate in Information Security Management Principles (CISMP)TRENDING
URM’s blog discusses everything you need to know about the CISMP, including its benefits, who it’s suited to, the topics the CISMP covers, and more.
Data Protection
Published on
5/7/2024
Oral references now count as processing for GDPR purposes (in the EU at least)TRENDING
URM’s blog explores a recent ECJ ruling which dictates that oral job references are covered by the GDPR
Cyber Security
Published on
27/6/2024
Getting the Most from Your Pen Tests - During and AfterwardsTRENDING
URM’s blog outlines the key steps you can take during and after a penetration test to improve your organisation’s security posture.
Other Standards
Published on
5/6/2024
ISO 42001 Artificial Intelligence Impact Assessments (AIIAs)TRENDING
URM’s blog explores artificial intelligence impact assessments (AIIAs) and offers advice on how to conduct these assessments in full conformance with ISO 42001.
Data Protection
Published on
5/6/2024
Data Protection Considerations for Data AnalyticsTRENDING
URM’s blog explores the data protection considerations for data analytics tools, and how to reap their many benefits while still maintaining GDPR compliance.
Information Security
Published on
4/6/2024
PCI DSS v4.0: Targeted Risk AnalysisTRENDING
URM’s blog dissects the new PCI DSS requirements around targeted risk analysis, what they involve, and how the 2 types of TRA in the Standard differ.
Information Security
Published on
3/6/2024
PCI DSS v4.0: Forced Password Changes and Zero Trust ArchitectureTRENDING
URM’s blog drills down into the PCI DSS v4.0 requirements around forced password changes, with a particular focus on the addition of zero-trust architecture.
Cyber Security
Published on
31/5/2024
How to Get the Most From Your Penetration TestsTRENDING
URM’s blog discusses how to prevent and mitigate the damage done by ransomware attacks, and how penetration testing can help your organisation avoid them.
Data Protection
Published on
29/5/2024
First official European response to the Data Protection and Digital Information BillTRENDING
URM’s blog explores the first formal European response to the DPDI Bill, and how the Bill may jeopardise the UK’s adequacy status when it reforms the UK GDPR.
Other Standards
Published on
17/5/2024
ISO 42001 and AI PerspectivesTRENDING
URM’s blog explores ISO 42001, its intentions and structure, and the AI perspectives that will need to be considered by organisations implementing the Standard.
URM’s consultants have assisted over 450 organisations achieve and maintain certification to ISO 27001.
Find out more
how URM CAN HELP?
URM CONSULTING services
Does your organisation fully comply with the General Data Protection Regulation (GDPR)?
If uncertain, URM is able to conduct a high-level GDPR gap analysis which will assist you understand your current levels of compliance and identify gaps and vulnerabilities.
Read more
URM CONSULTING services
How robust is your cloud infrastructure security?
URM can deliver cloud pen testing, covering all types of deployments. We can conduct external unauthenticated testing, security configuration reviews, and internal testing if your cloud infrastructure is integrated into on-premise infrastructure.
Read more
URM CONSULTING services
Do you need help preparing for and conducting internal ISO 27001 audits?
URM can help you with ISO 27001 audit
Read more
"
During our Cyber Essentials accreditation process we found URM to be very helpful and engaging ensuring that we can demonstrate our commitment to cyber security for both our partners and customers. We would recommend URM to other organisations that seek Cyber Essentials accreditation.
Cisco Security, Networks & Data Centre Experts
contact US
Let us help you
Let us help you in your compliance journey by completing the form and letting us know how we can best support you.
