In this episode of InfoSec Insider – Talk Cyber, George Ryan, Consultant at URM, breaks down the current state of cyber security in the modern business landscape and the common cyber security failings and challenges he sees organisations face, as well as offering key advice and guidance on what organisations can do to protect against these threats.  George leverages his extensive experience assisting organisations to enhance their cyber security to discuss:

Learn more about this topic: https://www.urmconsulting.com/blog/mitigating-cyber-risks-why-cyber-essentials-matters-more-than-ever 

 If you enjoyed this episode of InfoSec Insider – Talk Cyber, you can leave us a rating and review here:    

https://ratethispodcast.com/infosecinsider   

You can find more episodes of InfoSec Insider here:   https://urmconsulting.com/podcasts   

Brought to you by URM, the UK’s leading information and cyber security specialists.    

In this episode of InfoSec Insider, Wayne Armstrong, Senior Consultant at URM, breaks down the common mistakes and challenges organisations come up against on both sides of their certification assessment, i.e., before the external assessment when the Information Security Management System (ISMS) is first being implemented, and after certification has been achieved and the ISMS is being maintained.  Wayne leverages his 30+ years of experience in information security and risk management to discuss:  

Learn more about this topic: https://www.urmconsulting.com/blog/common-pitfalls-identified-in-organisations-seeking-iso-27001-certification 

 If you enjoyed this episode of InfoSec Insider, you can leave us a rating and review here:   https://ratethispodcast.com/infosecinsider   

 You can find more episodes of InfoSec Insider here:   https://urmconsulting.com/podcasts   

Brought to you by URM, the UK’s leading information and cyber security specialists.    

In this episode of InfoSec Insider – Talk DP, Stuart Skelly, a Senior GRC Consultant at URM, explains records of processing activities (ROPAs), a key document that almost every organisation must create and maintain in order to comply with the General Data Protection Regulation (GDPR).  Stuart leverages his 25+ years of specialisation in data protection law to discuss: 

Learn more about this topic:  https://www.urmconsulting.com/blog/who-needs-a-ropa-and-why https://www.urmconsulting.com/blog/how-to-create-a-record-of-processing-activities-ropa 

If you enjoyed this episode of InfoSec Insider – Talk DP, you can leave us a rating and review here: https://ratethispodcast.com/infosecinsider   

You can find more episodes of InfoSec Insider here: https://urmconsulting.com/podcasts   

Brought to you by URM, the UK’s leading information and cyber security specialists.    

In this episode of InfoSec Insider, Neil Jones, Senior Consultant at URM, breaks down the purpose and structure of the recently released ISO 42001, the International Standard for Artificial Intelligence Management Systems (AIMS), as well as explaining the Standard’s use of AI ‘perspectives’.  Neil leverages his 20+ years’ working with a range of risk and information security-related standards to discuss:  

Learn more about this topic: https://www.urmconsulting.com/blog/iso-42001-and-ai-perspectives  

If you enjoyed this episode of InfoSec Insider, you can leave us a rating and review here: https://ratethispodcast.com/infosecinsider   

You can find more episodes of InfoSec Insider here:   https://urmconsulting.com/podcasts   

Brought to you by URM, the UK’s leading information and cyber security specialists.    

In this episode of InfoSec Insider – Talk DP, Martin Brazier, Senior Data Protection Consultant at URM, explores the challenges of maintaining data protection compliance whilst conducting workplace monitoring, particularly in light of the workforce’s ever-increasing mobility, and how these challenges can be overcome.  Martin leverages his 20+ years of experience in information management and data protection compliance to discuss: 

Learn more about this topic: https://www.urmconsulting.com/blog/data-protection-considerations-for-monitoring-employees  

If you enjoyed this episode of InfoSec Insider – Talk DP, you can leave us a rating and review here: https://ratethispodcast.com/infosecinsider    

You can find more episodes of InfoSec Insider here:  https://urmconsulting.com/podcasts    

 Brought to you by URM, the UK’s leading information and cyber security specialists.     

In this episode of InfoSec Insider, Les Krause-Whiteing, Senior Consultant at URM, breaks down the concepts of confidentiality, integrity and availability (CIA), the 3 fundamental principles on which strong information security is built, and why they are so important to the effective and comprehensive information security management.  Les draws upon his extensive experience helping organisations enhance their information security to discuss:  

• What the CIA security triad is 

• How the principles of CIA tie into ISO 27001, and how they can help you meet the requirements of the Standard 

• Real-world examples of CIA not being maintained and the subsequent consequences  

• How to maintain the CIA of your organisation’s information.  

Learn more about this topic: https://www.urmconsulting.com/blog/what-is-the-cia-security-triad-confidentiality-integrity-and-availability-explained 

If you enjoyed this episode of InfoSec Insider, you can leave us a rating and review here: https://ratethispodcast.com/infosecinsider    

You can find more episodes of InfoSec Insider here: https://urmconsulting.com/podcasts          

Brought to you by URM, the UK’s leading information and cyber security specialists. 

In this episode of InfoSec Insider – Talk DP, Martin Brazier, Senior Data Protection Consultant at URM, explores some of the considerations and challenges of maintaining compliance with data protection legislation, such as the General Data Protection Regulation (GDPR), when developing and deploying artificial intelligence (AI) technology.  Martin leverages his 20+ years of experience in information management and data protection compliance to discuss:  

• The definition of AI  

• How the UK legislative framework around AI is evolving 

• The challenges associated with maintaining data protection compliance whilst developing and using AI, particularly in light of the GDPR’s 7 core principles 

• What you can do to overcome these challenges and achieve data protection compliance in AI systems. 

Learn more about this topic: https://www.urmconsulting.com/blog/data-protection-considerations-for-artificial-intelligence-ai 

If you enjoyed this episode of InfoSec Insider – Talk DP, you can leave us a rating and review here:   https://ratethispodcast.com/infosecinsider   

 You can find more episodes of InfoSec Insider here:   https://urmconsulting.com/podcasts   

Brought to you by URM, the UK’s leading information and cyber security specialists.    

In this episode of InfoSec Insider, Stuart Moran, Senior Consultant at URM, explores the addition of climate change considerations to 31 management system standards by the International Standards Organization (ISO) and the International Accreditation Forum (IAF).  Stuart draws upon more than 20 years of experience working with a wide range of ISO management system standards to discuss:  

• What the ISO/IAF climate change amendment is  

• How different industries might face unique challenges in integrating climate change considerations into their existing ISO management systems  

• ow you can leverage technology to enhance your climate change conformance efforts considering the increased focus on AI and cloud services in ISO standards 

• The future trends to anticipate given the evolving landscape of climate change regulations, and how you can prepare to adapt your management systems accordingly. 

Learn more about this topic: https://www.urmconsulting.com/blog/iso-and-iaf-add-climate-change-considerations-to-31-management-systems-standards 

If you enjoyed this episode of InfoSec Insider, you can leave us a rating and review here:   https://ratethispodcast.com/infosecinsider   

You can find more episodes of InfoSec Insider here:    https://urmconsulting.com/podcasts   

In this episode of InfoSec Insider – Talk DP, Stuart Skelly, Senior Data Protection Consultant at URM, provides some hints and tips on how to achieve and maintain compliance with the General Data Protection Regulation (GDPR), with a particular focus on the key documentation organisations need to have in place to comply.  Stuart leverages over 25 years of experience to discuss: 

• The importance of maintaining documented evidence of your GDPR compliance under the ‘accountability’ principle 

• Some of the key compliance documentation you need to produce, including records of processing activities (RoPAs) data protection impact assessments (DPIAs), privacy notices and personal data retention policies  

• What information you will need to include in these documents  

• When these documents are mandatory and whether any organisations are exempt from producing them.  

Learn more about this topic: https://www.urmconsulting.com/blog/10-top-tips-for-achieving-gdpr-compliance  

If you enjoyed this episode of InfoSec Insider, you can leave us a rating and review here:   https://ratethispodcast.com/infosecinsider  

You can find more episodes of InfoSec Insider here:   https://urmconsulting.com/podcasts  

Brought to you by URM, the UK’s leading information and cyber security specialists.   

In this episode of InfoSec Insider, Frazer Grudgings, Senior Consultant at URM, highlights the common pitfalls and mistakes he frequently sees organisations make when implementing ISO 27001, and explores the steps you can take to avoid these pitfalls.  Frazer draws upon his 15+ years of experience assisting organisations to implement ISO 27001 to discuss:  

• The most common mistakes made and challenges faced by organisations implementing ISO 27001 

• How to avoid making these mistakes and ensure your ISO 27001 implementation and certification process is as smooth and seamless as possible  

• Where you can look for help and support with your ISO 27001 implementation, both within your organisation and externally.  

Learn more about this topic: https://www.urmconsulting.com/blog/common-pitfalls-identified-in-organisations-seeking-iso-27001-certification 

If you enjoyed this episode of InfoSec Insider, you can leave us a rating and review here:   https://ratethispodcast.com/infosecinsider  

You can find more episodes of InfoSec Insider here:   https://urmconsulting.com/podcasts  

Brought to you by URM, the UK’s leading information and cyber security specialists.