The term 'Business Continuity (BC)' is used to describe the capability and resilience of an organisation to continue operating through, and after, disruptive events.  With BC, the goal is to analyse risks to critical business functions and implement risk mitigation measures in order to ensure your organisation can perform its functions during and following a disruption.  URM has a team of highly experienced BC and incident management (IM) consultants who can assist your organisation to achieve this goal and improve your BC planning capability and resilience.

Our approach is heavily aligned with recognised best practice, i.e. ISO 22301, the International Business Continuity Management System (BCMS) Standard.   Certified itself to ISO 22301, URM and its BC consultants can provide you with a plethora of consultancy and training services, irrespective of whether your goal is to achieve ISO 22301 certification or simply to develop and improve your BC capabilities.

Exercising Your BCPs and IMPs

It is imperative your organisation is able to respond in a prompt and efficient manner in the event of an incident.  This can be best achieved by conducting regular exercises with key role holders and their deputies.  URM’s team of incident management specialists is hugely experienced and skilled in devising challenging, original and appropriate scenarios which will exercise and validate your BCPs and IMPs.  Working closely with you, we will ensure the scenarios have clear objectives in terms of raising awareness, assessing how well participants understand the plans, as well as their own roles and responsibilities and how they work collectively as a team.  Having developed and facilitated the BC exercise, URM will provide you with a detailed report on how your Team performed against the exercise objectives, what worked well and what opportunities there are for improvement.  These improvements may relate to developing or refining your plans or in providing training and awareness to your key role holders.

One feature of our exercising over the last 10 years has been the increasing number of cyber related exercises we have developed, addressing such threats as malware attacks, ransomware incidents, data breaches and phishing attempts.  URM’s experience and expertise in this area is validated as an Assured Service Provider by the National Cyber Security Centre (NCSC) and IASME under the Cyber Incident Exercising scheme.  Under the Scheme, you can be assured, URM possesses the required skills and experience to create and facilitate bespoke and structured table top and live play cyber incident exercises.

Why URM?


Track Record

Our steady organic growth over two decades as a consultancy and training organisation is based on our reputation for delivering high quality, tailored solutions utilising highly experienced, skilled and pragmatic business continuity and risk management practitioners.  For those looking to certify to ISO 22301, our ISO certification track record is second to none with over 400 successful certifications and no failures.  We also guarantee you a successful result should you engage URM to help you achieve ISO 22301 certification.

Tailored Solutions

With our ‘getting the balance right’ approach URM’s goal is to ensure that your BC is appropriate to the amount and type of impact that is acceptable to your organisation following a disruption.  It is important to note that no two BCMS’ will be the same, due to differences in organisational and industry requirements, risk appetites, products and services provided, processes employed, size and structure of the organisation, the requirements of interested parties and, in some cases, legal and regulatory obligations.

URM will ensure your BC strategy and plans will be tailored to your organisation, and reflect how you work, the terminology you use and be integrated into business as usual.

Knowledge Transfer

URM’s consultants have extensive experience as both business continuity managers and in their role as consultants advising organisations on BCM best practice.  A key benefit of working with URM is our ‘real world’ knowledge transfer philosophy and training expertise which will enable you to manage and improve your BC without having to rely on ongoing external consultancy assistance.

Planning Your ISO 27001 Audit Programme

Latest update:
22 Apr
2024

URM’s blog drills down into ISO 27001 audits, offering advice on how to effectively develop and implement an ISO 27001 conformant audit programme.

Read more
Thumbnail of the Blog Illustration
Information Security
updateD:
25/3/2024
What is the CIA Security Triad? Confidentiality, Integrity and Availability Explained

URM’s blog explains how the principles of confidentiality, integrity and availability (CIA) can help align your information security controls with best practice

Read more
Thumbnail of the Blog Illustration
Information Security
updateD:
25/3/2024
The New Threat Intelligence Requirements in ISO 27001:2022

URM’s blog discusses the changes to the requirements around threat intelligence in ISO 27001:2022 and what certified organisations will need to do differently.

Read more
Thumbnail of the Blog Illustration
Information Security
updateD:
25/3/2024
A Comparison of ISO 9001 and ISO 27001

URM’s blog compares the management system clauses of ISO 27001 and ISO 9001 to identify integration opportunities.

Read more
"
We used URM as we had a large amount of information to redact for a Court of Protection case and neither had the time nor the knowledge to be able to complete this appropriately. URM were suggested to us and we made contact. They responded very quickly and were able to explain their role, estimated timescales & costings. During the initial consultation, they were very professional and approachable, and certainly had the skills we required. URM’s consultant provided us with details of the work they had completed before & we felt confident to pursue the work with them. We were on a tight deadline for court and URM were confident that they could provide the services we required in a timely manner. The logistics of sending a large amount of confidential documents were easy to navigate and straightforward. We were unable to very accurately gauge how much work was required, however URM’s Team supported us with this and maintained regular contact regarding their progress and addressed any concerns they had. When we needed to contact them, they were prompt with their responses. The work did take longer that envisaged, however that was due to the amount of work that we, as clients, were unable to accurately identify would be required. We did, however, meet the deadline for court. I would certainly use the services of URM again & if possible would work with same team. The services are not cheap, however redacting sensitive information is a skilled task and, therefore, having a professional complete this work is priceless.
contact US

Let us help you

Let us help you in your compliance journey by completing the form and letting us know how we can best support you.