Blog
Recent blogs
Building an Effective Statement of Applicability (SoA)
Published on
13
November
2026
TRENDING
URM's blog explores how to build an effective ISO 27001 Statement of Applicability, from documenting controls and justifications to audit readiness.
Read more
Data Protection
Published on
21/6/2022
When and How to Conduct a Data Protection Impact Assessment (DPIA)TRENDING
A DPIA delivers a pre-emptive approach to assessing these risks, and can prevent a data breach occurring. We present an outline of steps in conducting a DPIA
Information Security
Published on
13/6/2022
PCI DSS v4 – Changes at a GlanceTRENDING
After several years wait, and to surprisingly little fanfare, the PCI SSC released the new version of the PCI Data Security Standard (DSS).
Data Protection
Published on
13/6/2022
UK International Data Transfer AgreementTRENDING
DTA and the UK Addendum to the current European Commission’s SCCs re the next steps in providing a transfer tool for complying with the UK GDPR.
Data Protection
Published on
10/6/2022
How to Create a Record of Processing Activities (ROPA)TRENDING
In this blog, we will outline a step-by-step procedure on how you can create a ROPA.
Data Protection
Published on
8/6/2022
Who Needs a ROPA and Why?TRENDING
Under the UK GDPR, the majority of organisations processing personal data are required to create and maintain a ROPAs
Information Security
Published on
27/5/2022
What is ISO 27001? TRENDING
ISO 27001 is the International Standard for Information Security Management. It provides organisation with a framework and an approach to protecting assets
Information Security
Published on
25/5/2022
Benefits of Implementing ISO 27001TRENDING
What are the Benefits of Implementing ISO 27001? We dig a bit deeper on the benefits that are gained from implementing the standard.
Information Security
Published on
25/5/2022
Streamlining Asset Identification For Effective Risk ManagementTRENDING
A question which comes up time and time again is ‘How do I approach asset identification within my information security risk assessment’.
Should it be required, we can also manage your full ISO 27001 internal audit process and would welcome the opportunity to discuss your requirements with you.
Find out more
how URM CAN HELP?
URM CONSULTING services
Unsure how PCI DSS applies to your environment?
You do not need a fully scoped programme to speak with us. We offer a free call to help you understand your PCI DSS obligations, clarify scope, and identify practical next steps. Early insight can significantly reduce complexity and cost
Read more
URM CONSULTING services
Do you need help preparing for and conducting internal ISO 27001 audits?
URM can help you with ISO 27001 audit
Read more
URM CONSULTING services
Receive a Bespoke AI Management System
URM tailors ISO 42001 solutions to your unique risks, sector, and culture—ensuring seamless integration into business-as-usual.
Read more
"
Our URM consultant was most helpful. Very constructive with her thoughts. She completely understood the technology we are using to monitor the ISMS, which allowed her to fully appreciate the documentation.
contact US
Let us help you
Let us help you in your compliance journey by completing the form and letting us know how we can best support you.