Blog

We provide some questions which should help you in determining your level of compliance with the GDPR

We have seen an increased focus on the General Data Protection Regulation (GDPR) by certification body (CB) assessors when conducting ISO 27001 audits.

Broadly speaking, information security is held up by three pillars – People, Process and Technology. It is widely accepted that humans are the weakest link

BS 10012 is a standard which has been developed to enable organisations to implement a personal information management system (PIMS).

Why can it still be challenging to gain traction on your GDPR compliance project?

The adoption of the General Data Protection Regulation (GDPR) in April 2016 had wide-ranging impacts. These affect all organisations.

The purpose of ISO 27002 is to provide organisations with guidance on selecting, implementing and managing information security controls.

Annex A of ISO 27001 comprises 114 controls which are grouped into the following 14 control categories.

As with all ISO standards, it has been developed by a panel of experts and provides a specification for the development of a ‘best practice" ISMS

Executing your decision to use an information security management system (ISMS) to manage the security of your information assets is a project. It is not.

In this blog, we aim to provide 10 top tips to enable you to keep important information assets safe and secure whilst working remotely.

There are many good reasons to implement an information security management system (ISMS) and get it certified to ISO 27001.

In this blog, we’re going back to basics and looking at some of the fundamentals of information security and ISO 27001.

In this blog, we’ll take a look at management commitment, one of the most significant.

Due to the increased use of technologies and the ‘human’ involvement, it is inevitable we are all going to face more and more information security incidents.

Typically, this question is twofold; which assets to include and the depth or granularity. In this blog, we will look at granularity.

URM assisted over 500 organisations achieve ISO 27001 certification, here are the critical steps when implementing an effective information security system.

A key role of risk management is helping organisations decide how limited resources can be most effectively used to address the most pressing business issues.

In order to meet the requirements of ‘Asset management’ A.8 from Annex A of ISO 27001, it is necessary to identify organisational assets and define protection

‘How do we approach asset identification within our information security risk assessment?’. This blog examines which assets or asset types to include.

In this blog, we want to dig a bit deeper into the benefits that are gained from implementing the Standard and from achieving certification...

ISO 27001 is a standard for Information Security Management that provides any organisation with a framework to protect most valuable assets.

We address a number of key questions: What are the Main Contents? What Led to it Being Published? And others.

A DPIA delivers a pre-emptive approach to assessing these risks, and can prevent a data breach occurring. We present an outline of steps in conducting a DPIA

After several years wait, and to surprisingly little fanfare, the PCI SSC released the new version of the PCI Data Security Standard (DSS).

DTA and the UK Addendum to the current European Commission’s SCCs re the next steps in providing a transfer tool for complying with the UK GDPR.

In this blog, we will outline a step-by-step procedure on how you can create a ROPA.

Under the UK GDPR, the majority of organisations processing personal data are required to create and maintain a ROPAs

ISO 27001 is the International Standard for Information Security Management. It provides organisation with a framework and an approach to protecting assets

What are the Benefits of Implementing ISO 27001? We dig a bit deeper on the benefits that are gained from implementing the standard.