Video Library

We provide an overview of the changes to Cyber Essentials Plus, the scheme’s audited qualification.

Cyber Essentials Changes in 2026 – Major Non-compliances

We explain the new Cyber Essentials Plus rule banning major non-compliances in the VSA, how it differs from before, and the likely practical impact.

Cyber Essentials Changes in 2026 – Backups

We explore the importance of backups in strengthening their cyber resilience.

Cyber Essentials Changes in 2026 – User Access Control

We discuss the shift in focus regarding user access control and passwordless authentication options.

Cyber Essentials Changes in 2026 – Web Applications

We discuss the updates to the guidance for web applications, now titled ‘Application Development’.

Cyber Essentials Changes in 2026 – Scoping Criteria

We explain the various changes to scoping criteria and how the requirements around scoping have tightened.

Cyber Essentials Changes in 2026 – Automatic Failure Questions

We discuss the questions that have been reclassified as ‘automatic failure questions’ in the new Danzell Question Set.

Cyber Essentials Changes in 2026 – MFA

We break down the updates to Cyber Essentials requirements for multi-factor authentication (MFA).

Cyber Essentials Changes in 2026 – Cloud Services

We explain the new formal definition of a ‘cloud service’ that IASME has provided this year.

Cyber Essentials Changes in 2026 – an Overview

We provide a high-level overview of the changes to the scheme, from the new Danzell Question Set to the updated Requirements for IT Infrastructure document.

ISO 27001

Critical Steps in Implementing ISO 27001

We share the key benefits of implementing ISO 27001 reported by organisations that have achieved certification to the Standard.

ISO 27001

How ISO 27001 Can Benefit Your Organisation

Thomas Harrison

We share the key benefits of implementing ISO 27001 reported by organisations that have achieved certification to the Standard.

ISO 27001

How is ISO 27001 Structured

Thomas Harrison

We break down the structure of ISO 27001, including its ‘Harmonized Structure’ used by other ISO management system standards.

ISO 27701

What is ISO 27001?

We give a high-level overview of what ISO 27001 is, the background and intention of the Standard, and explain the concept of ISMS

How to Maintain Cyber Essentials and Cyber Essentials Plus Certification

We share the best practices that will allow you to maintain Cyber Essentials and Cyber Essentials Plus certification

Preparing for Cyber Essentials and Cyber Essentials Plus Certification

We outline effective ways of preparation for Cyber Essentials or Cyber Essentials Plus

Cyber Essentials and Cyber Essentials Plus - 5 Technical Control Areas

This overview gives you a clear picture of today’s cyber risk landscape and what you can do to stay ahead.

What Are the Differences Between CE and CE Plus?

This overview gives you a clear picture of today’s cyber risk landscape and what you can do to stay ahead.

What Are Cyber Essentials and Cyber Essentials Plus?

This overview gives you a clear picture of today’s cyber risk landscape and what you can do to stay ahead.

The Current Cyber Threat Landscape

This overview gives you a clear picture of today’s cyber risk landscape and what you can do to stay ahead.

Recent BLOGS

ISO 27001 Clause 7.5: Documented Information Explained

Published on

23/4/2026

Neil Jones

URM’s blog breaks down ISO 27001 Clause 7.5 requirements, with practical guidance on how to achieve conformance to this Clause & what external assessors expect.

Published on

9/4/2026

Common Issues Identified During Audits of ISO 27001:2022

URM’s blog explores common issues and areas for improvement identified during audits of organisations that have transitioned to ISO 27001:2022

ISO 27001 Clause 9.1: Monitoring, Measurement, Analysis and Evaluation Explained

Published on

1/4/2026

Neil Jones

URM’s blog explores ISO 27001 Clause 9.1, what it requires and practical guidance on how to implement this Clause in full conformance with the Standard.

Published on

26/3/2026

Cyber Essentials Update 2026

URM’s blog breaks down key changes to the Cyber Essentials scheme coming into force on 27 April 2026, including the new Danzell Question Set.

Continuous Compliance With the PCI DSS

Published on

23/3/2026

Alastair Stewart

URM’s blog outlines how continuous compliance fits into PCI DSS, and explores practical ways to integrate requirements into business-as-usual (BAU) operations.

ISO 27001 – Clause 6.3: The Importance of Planned ISMS Change Management

Published on

20/3/2026

Neil Jones

URM’s blog explains the purpose & requirements of ISO 27001 Clause 6.3, types of ISMS change it covers, and key considerations when putting it into practice.

Cyber Security and the Board: A Sign of What’s to Come

Published on

10/3/2026

URM’s blog explains recent amendments to the Cyber Security and Resilience Bill, how they align with broader regulatory shifts, & practical steps to prepare.

Data Protection

Published on

5/3/2026

Stuart Skelly

Data Protection Interpretation Affirmed by the Court of Appeal in DSG Retail Case

URM’s blog unpacks the DSG vs. ICO case, how it reached the Court of Appeal, & the Court’s decision on the status of pseudonymised data in the hands of attacker

Published on

20/2/2026

Information Security Risk Assessment and Treatment: Understanding Relevant Risks

URM’s blog explains the building blocks of information security risk, outlining how risks can be valued and prioritised, the role of rise appetite, and more.

Data Protection

Published on

16/2/2026

Rachael Salter

Managing DSARs and Other Data Subject Rights

URM’s blog explores how DSARs can be used to drive improvements, and share our insights on managing other data subject rights efficiently and effectively.

NHS Cyber Security Open Letter: What Does it Mean for Suppliers?

Published on

12/2/2026

George Ryan

URM’s blog explains the recent open letter to suppliers issued by the NHS, what it means, why it matters, and the practical steps you can take to prepare.