ISMS

The EU GDPR and the UK DPA both require organisations to protect and ensure the privacy of any personal data which they process.

Is there a catch-all international standard that effectively proves external verification of data protection compliance?

We have seen an increased focus on the General Data Protection Regulation (GDPR) by certification body (CB) assessors when conducting ISO 27001 audits.

Executing your decision to use an information security management system (ISMS) to manage the security of your information assets is a project. It is not.

There are many good reasons to implement an information security management system (ISMS) and get it certified to ISO 27001.

In this blog, we’re going back to basics and looking at some of the fundamentals of information security and ISO 27001.

In this blog, we’ll take a look at management commitment, one of the most significant.

URM assisted over 350 organisations achieve ISO 27001 certification, here are the critical steps when implementing an effective information security system.

ISO 27001 is a standard for Information Security Management that provides any organisation with a framework to protect most valuable assets.

There is some confusion about the difference between having an ISMS which is certified to ISO 27001 and one which is compliant or aligned to the Standard.