Consultancy and Services

Information Security

ISO 27001

What is ISO 27001?Gap Analysis Risk Assessment Implementation Consultancy Services

PCI DSS

What is PCI DSS?Penetration Testing Scope Reduction Gap Analysis Implementation Assessment and Auditing Consultancy Services

Artificial Intelligence

ISO 42001 Gap Analysis Implementation Internal Audits EU AI Act NIST AI RMF

SOC 2

What is SOC 2?Gap Analysis Remediation Audit and Assessment Training Consultancy Services

CMMC

What is CMMC?Gap Analysis Implementation Assessment Consultancy Services

DORA

Gap Analysis Consultancy Services

GC RTS

What is GC RTS?Gap Analysis Implementation Assessment Consultancy Services

SWIFT CSP

What is SWIFT CSP?Gap Analysis Implementation Assessment and Auditing Consultancy Services

NIST CSF

What is NIST CSF?Implementation Assessment Consultancy Services

Information Security Consultancy Services

URM provides consultancy services on:

Cyber Security

penetration testing

Penetration Testing

What is Pen Testing?Network and Infrastructure Web Application Cloud Mobile Application Business-led Services

Cyber security Services

Cyber Security Headline Assessment

Cyber Essentials

What is Cyber Essentials?Assessment Gap Analysis Application Review Cyber Essentials Plus Cyber Advisor Certified by URM Consultancy Services

DCC

Gap Analysis Implementation Support Consultancy Services

cyber security

NIS 2

What is NIS 2?Services

Vulnerability Scanning

What is it?Services

Social Engineering

What is Social Engineering?Services

Incident Response

What is Incident Response?Services

Cyber Resilience Act

What is CRA? Services

Cyber Security Services

URM provides services on:

Penetration Testing

Cyber Essentials

Vulnerability Scanning

Social Engineering

Incident Response

Cyber Resilience Act

Data Protection

A set of practices, laws, and policies designed to safeguard personal data from unauthorised access, misuse, disclosure, destruction, or loss.

GDPR

A comprehensive data protection law designed to protect personal data and privacy rights in the EU and the UK.

DUAA Compliance Support

URM helps organisations assess and strengthen their compliance with the new DUAA requirements by carrying out a structured gap analysis of current data protection practice

Gap Analysis

Helps identify the "gaps" or areas where the organisation is not meeting GDPR standards.

DPIA

A process that helps identify and address privacy risks in data processing activities.

ROPA

A fundamental requirement that helps maintain transparency, accountability, and compliance in data processing activities.

Virtual DPO

An effective solution for organisations seeking to comply with GDPR requirements without the need for a full-time, in-house data protection officer.

DSAR

A mechanism that allows individuals to request access to the personal data that an organisation holds about them.

Awareness Training

A critical component of an organisation's data protection strategy.

The STAIRs Standard

The STAIRs standard grants tenants of private sector social housing landlords the right to request a broad range of non-personal information.

Data Protection Consultancy and Services

URM provides consultancy and services on:

GDPR Training and Awareness

Business Continuity

Processes and procedures an organisation implements to ensure that essential functions can continue during and after a disaster or disruption.

ISO 22301

An international standard for Business Continuity Management Systems (BCMS). It provides a framework and guidelines for organisations to prepare for, respond to, and recover from disruptive incidents.

ISO 22301 Gap Analysis

Evaluates an organisation's business continuity management practices against the requirements of the ISO 22301 standard.

ISO 22301 Implementation

The process of establishing, operating, monitoring, reviewing, and continually improving a BCMS in accordance with the ISO 22301 standard

Business Impact Analysis

A systematic process used to identify and evaluate the potential effects of disruptions to critical business operations.

Business Continuity Plan

A comprehensive document that outlines the procedures and actions to ensure that critical business functions can continue during and after a disruptive incident.

Exercising

Testing and validating BC plans through various types of drills and exercises.

Business Continuity Consultancy and Services

URM provides consultancy and services on:

ISO 22301

ISO 22301 Gap Analysis

ISO 22301 Implementation

Business Impact Analysis

Business Continuity Plans

Exercising BCPs and IMPs

Internal Audit

An independent, objective assurance and consulting activity designed to add value and improve an organisation's operations. It helps an organisation accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes.

Outsourced Service

The practice of an organisation hiring an external service provider to perform internal audit activities instead of using its in-house audit team.

Audit Schedules

Planned timetable and sequence of audit activities to be conducted over a specific period, usually a year.

Third Party Audit

An independent evaluation conducted by an external organisation or auditor that is not affiliated with the company being audited.

Internal Audit Consultancy and Services

URM provides consultancy and services on:

Other Standards

Standard for quality management systems (QMS). It is part of the ISO 9000 family of standards and provides a framework for organisations to ensure they meet the needs and expectations of their customers and other stakeholders.

ISO 13485

ISO 13485 is the standard for medical device quality management system (MDQMS) that is intended to support the design, development and support of medical devices which meet applicable regulatory requirements and do no harm to patients.

ISO 42001

Standard is designed to ensure that AI technologies are developed, deployed, and maintained in a responsible, transparent, and ethical manner. It addresses various challenges associated with AI, including risk management, ethical considerations, transparency, and continuous learning.

Other Standards Consultancy and Services

URM provides consultancy and services on:

Products

Information Security Risk Management Software

Abriska 19011

Audit and Action Management Software

Abriska 27036

Supplier Risk Management Software

Abriska 22301

Business Continuity Management Software

Abriska 31000

Enterprise Risk Management Software

Alurna

Online Awareness Training Tool

Training

Upcoming Courses:

April 20, 2026

CISMP

April 22, 2026

How to Manage Data Subject Access Requests (DSARs)

May 20, 2026

Conducting Data Protection Impact Assessments (DPIAs)

Resources

Podcasts

InfoSec Insider

Talk Cyber

Talk DP

FAQs

White Papers

Data Sheets

Case Studies

Quiz

Video Library

Recent Case Study

Case Study

Smarter Technologies

With the support of URM’s team, Smarter Technologies has implemented robust, sustainable practices that align with its operational goals and values

Blogs

Wayne Armstrong

Common Issues Identified During Audits of ISO 27001:2022

Neil Jones

ISO 27001 Clause 9.1: Monitoring, Measurement, Analysis and Evaluation Explained

Amarjit Sandhu

Cyber Essentials Update 2026

Alastair Stewart

Continuous Compliance With the PCI DSS

Neil Jones

ISO 27001 – Clause 6.3: The Importance of Planned ISMS Change Management

Recent Blog

Information Security

Wayne Armstrong

Common Issues Identified During Audits of ISO 27001:2022

URM’s blog explores common issues and areas for improvement identified during audits of organisations that have transitioned to ISO 27001:2022

Events

About Us

About URM

Testimonials

Partners

Our Partners

Become Partner

Subscribe to our mailing list

Partners

What are the benefits of the partnership?

Attract new customers with shared skills and knowledge.
Broaden product and service offerings within Cyber, Risk and Compliance.
Sales and Marketing support.
Dedicated support for sales meetings/calls
Training.
Events and webinars.

Our Partners

Become our partner!

URM works with a range of partners to deliver the best quality service.

Partner With URM Today. Please register below and we will contact you to discuss the opportunity.

Register to become a Partner

Having been involved in over 450 successful ISO 27001 certifications, URM Consulting Services (URM) is ideally placed to advise you on the essential activities and tasks you will need to carry out in order to maintain and improve your ISO 27001 auditing function and programme.

Find out more

How URM can help?

urm consulting services

If uncertain, URM is able to conduct a high-level GDPR gap analysis which will assist you understand your current levels of compliance and identify gaps and vulnerabilities.

urm consulting services

With 20 years’ experience and 400+ successful projects, URM’s expert consultants will guide you every step of the way—no failures, just results. Partner with us and get certified with confidence.

urm consulting services

URM can provide a range of ISO 27002:2022 transition services including conducting a gap analysis, supporting you with risk assessment and treatment activities as well as delivering a 2-day transition training course.

We were incredibly impressed with our consultant’s attention to detail during the reworking of many documents and the in-year assessment last month. He stood up and had his finger on the pulse and was a great help. He is liked by our team, and we look forward to a long working relationship with him.

Biffa