Over the last 19 years, URM has worked with organisations of all sizes and from a wide range of market sectors in helping them to achieve and maintain certification with international standards, such as ISO 27001 (information security), ISO 22301 (business continuity), Cyber Essentials and Cyber Essentials Plus, preparing for a SOC 2 audit as well as complying with standards such as the Payment Card Industry Data Security Standard (PCI DSS) and complying with regulations such as the GDPR.

Here we provide a number of case studies from a cross-section of those organisations. In each case study we examine business drivers, challenges, key success criteria and benefits derived. Cumulatively, they provide some invaluable lessons and pointers for those organisations embarking on their certification journeys.

ISO 27001, ISO 22301, ISO 20000 and PCI DSS consultancy and product-related case studies

"
I know many Cyber Essentials providers are rigid to the point of not understanding the goal of CE, but we haven’t found that with URM. We are extremely happy with the service we’ve received – our Cyber Essentials recertifications are always painless and straightforward. The different assessors we’ve had have all been great and pitch to the right level, as well as having an extremely strong knowledge of the subject matter. The account management side is also excellent. Our Account Manager checks in with us on a regular basis, and is very approachable and credible, with a comprehensive understanding of Cyber Essentials.
CISO at University of Surrey