x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

InfoSec Insider

The InfoSec Insider podcast brings you weekly interviews with practicing senior consultants, who draw upon their extensive experience to provide detailed and practical guidance on all things information and cyber security, data protection compliance, risk management, and more. In each episode, one of our experts takes a deep-dive into a particular aspect of their area of specialism, whether that be certifying to ISO 27001, outlining some top tips for GDPR compliance, making the case for alternative

business management

All Episodes

16:32

ISO 27001 Information Security Management Controls

InfoSec Insider ·

2025/06/26

In this episode of InfoSec Insider, Mark O’Kane, Consultant at URM, offers his insights into the information security management controls within Annex A of ISO 27001, which comprise the first eight controls of Annex A’s ‘Organisational’ control theme. Mark leverages his extensive experience supporting ISO 27001 implementations to discuss:What the organisational controls are, and how the first eight fit into the overall aim of the ‘Organisational’ control theme The role of management and senior

en

24:54

ISO 27001 Access Management Controls

InfoSec Insider ·

2025/06/19

In this episode of InfoSec Insider, Wayne Armstrong, Senior Consultant at URM, provides his insights on the 4 controls that relate to access management in the ‘Organisational’ control theme of ISO 27001’s Annex A. Wayne leverages his 30+ of experience with information security to discuss: The requirements of each of the following 4 controls and how your organisation can go about meeting them: A.5.15 – Access control A.5.16 – Identity management A.5.17 – Authentication information A.5.18

en

20:09

ISO 27001 Supplier Management Controls

InfoSec Insider ·

2025/06/12

In this episode of InfoSec Insider, Wayne Armstrong, Senior Consultant at URM, breaks down the 5 supplier management-related controls in the ‘Organisational’ control theme of ISO 27001’s Annex A. Wayne draws upon 30+ of experience with information security to discuss: Why your organisation should consider supplier management as part of information security What each of the following 5 controls cover and how to implement them: A5.19 – Information security in supplier relationships A5.20

en

18:14

Information Risk Assessment and Treatment in ISO 27001

InfoSec Insider ·

2025/06/05

In this episode of InfoSec Insider, Jack Woods, Consultant at URM, explores information risk assessment and risk treatment in the context of ISO 27001, the International Standard for Information Security Management Systems (ISMS’). Jack leverages his extensive experience assisting organisations to implement an ISMS and certify to the Standard to discuss:The purpose of a risk assessment How risk fits into ISO 27001 and its requirements How to conduct an information security risk assessment The

en

14:10

Technological Controls in ISO 27001

InfoSec Insider ·

2025/05/29

In this episode of InfoSec Insider, Wayne Armstrong, Senior Consultant at URM, provides his insights on the 34 technological controls in Annex A of ISO 27001 and how these can be implemented by organisations looking to conform or certify to the Standard. Wayne leverages his 30+ years of experience in information security and risk management to discuss:What the technological controls in ISO 27001 are designed to achieve How you can go about selecting the most appropriate technological controls for

en

18:05

ISO 27001 – Physical Security Controls

InfoSec Insider ·

2025/05/22

In this episode of InfoSec Insider, Wayne Armstrong, Senior Consultant at URM, breaks down the ‘Physical’ control theme from Annex A of ISO 27001, which are a set of security measures aimed at protecting an organisation’s physical assets and environment, such as their buildings, equipment, and paper copies of documents. Wayne leverages his 30+ of experience with information security to discuss:Why the physical security controls are important and what physical controls are recommended by ISO

en

15:05

Sharing Personal Data With the Police

InfoSec Insider ·

2025/05/15

In this episode of InfoSec Insider – Talk DP, Martin Brazier, Senior Data Protection Consultant at URM, breaks down the General Data Protection Regulation’s (GDPR’s) requirements for organisations that need to share personal data with the police in order to report a crime, or following a request for data to assist with an investigation. Martin leverages his 20+ years of experience in information management and data protection compliance to discuss:  The legislative framework governing police

en

23:17

ISO 27001 Audits

InfoSec Insider ·

2025/05/08

In this episode of InfoSec Insider, Wayne Armstrong, Senior Consultant at URM, explains the steps organisations can take to effectively plan, conduct, and action an ISO 27001 internal audit. Wayne draws upon 30+ years of experience in the information security and risk management field to discuss:The key things to remember when planning your audit programme and to plan specific audits His tips for auditors when they are conducting audits The key considerations when reporting on audit results When

en

21:47

People Controls in ISO 27001

InfoSec Insider ·

2025/05/01

In this episode of InfoSec Insider, Frazer Grudgings, Senior Consultant at URM, provides key insights on the ‘People’ control theme of ISO 27001’s Annex A, which are measures organisations can implement to protect employees and influence their behaviour in relation to information security. Frazer leverages his over 15 years of experience in the information security field to discuss: Why ‘people controls’ warrants its own control theme How screening and pre-employment policies can help His

en

09:33

ISO 13485 Explained

InfoSec Insider ·

2025/04/24

In this episode of InfoSec Insider, Stuart Moran, Senior Consultant at URM, offers essential advice on ISO 13485, the International Standard for Medical Devices Quality Management Systems (MDQMS). Stuart draws upon over 20 years of experience in managing organisation-wide management systems to discuss:What ISO 13485 is and why it’s important for regulatory compliance Which organisations ISO 13485 is applicable to, including medical device manufacturers and their suppliers When you should consider

en

16:03

Are you processing special category data without...

InfoSec Insider ·

2025/04/17

In this episode of InfoSec Insider – Talk DP, Martin Brazier, Senior Consultant at URM, explains the General Data Protection Regulation’s (GDPR’s) requirements around special category personal data, and how organisations can ensure they are not processing it unknowingly or unnecessarily. Martin leverages his 20+ years of experience in information management and data protection compliance to discuss:  What the GDPR defines as ‘special category data’ and the extra protections it affords to this

en

19:22

The Impact of AI on PCI DSS Compliance

InfoSec Insider ·

2025/04/10

In this episode of InfoSec Insider, Alastair Stewart, Senior Consultant and Qualified Security Assessor (QSA) at URM, explores the ways in which artificial intelligence (AI) tools and systems can be leveraged for compliance with the Payment Card Industry Data Security Standard (PCI DSS). Alastair draws upon over a decade of experience with the PCI DSS to discuss:PCI DSS basics – what the PCI DSS is, which organisations need to comply, and how compliance the Standard is assessed How AI can help

en

21:54

10 Top Tips for Maintaining Information and Cyber...

InfoSec Insider ·

2025/04/03

In this episode of InfoSec Insider, Frazer Grudgings, Senior Consultant at URM, shares his top 10 tips on how to embed key cyber security practices and maintain the security of your organisation’s information assets whilst working remotely, whether that be from home or another location. Frazer draws upon 15+ years in the information security field to explain the importance of and how to implement the following best practices:Keeping assets out of sight Using strong passwords on company devices

en

15:28

SOC 2 Explained

InfoSec Insider ·

2025/03/27

In this episode of InfoSec Insider, Chris Heighes, Senior Consultant at URM, breaks down the System and Organization Controls 2 (SOC 2), an information security framework aimed at providing assurance to a service provider’s clients that their data is stored and processed in a secure manner. Chris leverages his 15+ years of experience in the information security space to discuss:Which organisations should be considering a SOC 2 audit What a SOC 2 audit involves The benefits of having a SOC 2

en

16:44

PCI DSS V4.0 – How to Reduce Your PCI DSS Scope

InfoSec Insider ·

2025/03/20

In this episode of InfoSec Insider, Alastair Stewart, Senior Consultant and Qualified Security Assessor (QSA) at URM, provides key advice and guidance on the steps organisations can take to streamline and reduce their Payment Card Industry Data Security Standard (PCI DSS) scope. Alastair leverages more than a decade of experience with the PCI DSS to discuss:What the PCI DSS defines as ‘in scope’, what system components are and how you can assess the scope of individual systems The benefits of

en

18:32

New Government Proposal to Prevent Organisations From...

InfoSec Insider ·

2025/03/13

In this episode of InfoSec Insider – Talk Cyber, Stuart Skelly, Senior Consultant at URM, explains a recently announced consultation by the UK government into proposals by the Home Office, which would increase its control and visibility of ransomware attacks on organisations operating in the UK. Stuart leverages his extensive legal background and experience as a governance, risk and compliance consultant to discuss:What is meant by ransomware and a ransomware cyber attack The Home Office’s

en

17:29

ISO 27002 – Purpose and Benefits

InfoSec Insider ·

2025/03/06

In this episode of InfoSec Insider, Frazer Grudgings, Senior Consultant at URM, offers key insights on ISO 27001’s supplementary guidance standard, ISO 27002, which provides guidance on implementation of the ISO 27001 Annex A controls. Frazer leverages his 15+ years of experience to discuss:What ISO 27002 is The ‘attributes’ framework in ISO 27002 and the purpose of this framework The different ways ISO 27002 can be used. Learn more about this topic:

en

16:37

How to Build Customer Trust Through Data Protection

InfoSec Insider ·

2025/02/27

In this episode of InfoSec Insider – Talk DP, Martin Brazier, Senior Data Protection Consultant at URM, explains the importance of data protection for building and maintaining customer trust, and offers key advice on how to ensure that your data processing practices will help facilitate strong relationships with your customer base. Martin leverages his 20+ years of experience in information management and data protection compliance to discuss: Why customers are now more likely to care about how

en

16:10

Developing an ISO 27001 Information Security Policy

InfoSec Insider ·

2025/02/20

In this episode of InfoSec Insider, Frazer Grudgings, Senior Consultant at URM, offers key advice and guidance on creating an information security policy that meets the requirements of ISO 27001, the International Standard for Information Security Management Systems (ISMS’). Frazer leverages his 15+ years of experience supporting organisations to certify against ISO 27001 to discuss:What an information security policy is in the context of ISO 27001 How to develop an information security policy

en

19:03

Analysis of Fines Imposed by the Information...

InfoSec Insider ·

2025/02/13

In this episode of InfoSec Insider – Talk DP, Stuart Skelly, Senior Consultant at URM, provides a break down and analysis of how the Information Commissioner’s Office (ICO’s) has enforced UK data protection (DP) regulations in 2024, and how this compares to the action taken by the regulator in previous years. Stuart leverages his 25+ years of specialisation in data protection law to discuss:   The types of enforcement action available to the ICO (i.e., reprimands, enforcement notices and fines)

en

64 results

Similar Podcasts

TaxTalent.com The Golden Rule Podcast

Adam Golden

TaxTalent.com Podcast

Tony Santiago

Handelsblatt Crime - spannende Streitfälle der deutschen Wirtschaft

Ina Karabasz, Solveig Gode, Sönke Iwersen

Deffner und Zschäpitz – Der Wirtschafts-Talk von WELT

WELT

Black Box - La scatola nera della finanza

Guido Brera e Gian Luca Comandini -...