x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

InfoSec Insider

The InfoSec Insider podcast brings you weekly interviews with practicing senior consultants, who draw upon their extensive experience to provide detailed and practical guidance on all things information and cyber security, data protection compliance, risk management, and more. In each episode, one of our experts takes a deep-dive into a particular aspect of their area of specialism, whether that be certifying to ISO 27001, outlining some top tips for GDPR compliance, making the case for alternative

business management

All Episodes

16:09

Cyber Security for Small and Medium-Sized Enterprises...

InfoSec Insider ·

2025/02/06

In this episode of InfoSec Insider – Talk Cyber, George Ryan, Consultant at URM, takes a deep dive into the unique cyber security challenges faced by small and medium-sized enterprises (SMEs), and the steps these organisations can take to improve their cyber security postures. George leverages his extensive experience assisting organisations to enhance their cyber security to discuss:The current state of the cyber security landscape for SMEs and how this differs to their larger counterparts The

en

12:28

Top Tips for Implementing an ISO 27001 ISMS

InfoSec Insider ·

2025/01/30

In this episode of InfoSec Insider, Wayne Armstrong, Senior Consultant at URM, shares some of his top tips for implementing an information security management system (ISMS) that is both conformant to the requirements of ISO 27001 and effectively enhances an organisation’s information security culture. Wayne draws upon his 30+ years of experience in information security and risk management to discuss:The role of top management in the success of an ISMS implementation project The approach you

en

15:21

STAIRs: A New Standard for Social Housing Providers

InfoSec Insider ·

2025/01/23

In this episode of InfoSec Insider – Talk DP, Stuart Skelly, a Senior GRC Consultant at URM, breaks down the Social Tenant Access to Information Requirements (STAIRs), an upcoming standard with which private registered providers (PRPs) of social housing (such as housing associations) will need to comply. Stuart leverages his 25+ years of specialisation in data protection law to discuss:What STAIRs is and the issues it has been designed to address The rights that STAIRs will provide to tenants

en

14:42

DORA - EU Cybersecurity Legislation for Financial...

InfoSec Insider ·

2025/01/16

In this episode of InfoSec Insider, Chris Heighes, Senior Consultant at URM, takes a deep dive into the Digital Operations Resilience Act (DORA), a new EU regulation for financial entities and their key suppliers to improve their digital operational resilience, which comes into force on 17 January 2025. Chris Leverages his 30 years of IT experience and 15 years’ experience in information security to discuss:What DORA is Which entities are in scope of the Act How DORA’s requirements differ from

en

16:18

Preparing for a PCI DSS v4 Assessment

InfoSec Insider ·

2025/01/09

In this episode of InfoSec Insider, Alastair Stewart, Senior Consultant and Qualified Security Assessor (QSA) at URM, breaks down the changes to assessments in v4.0 of the Payment Card Industry Data Security Standard (PCI DSS), and how organisations can prepare for their v4 assessments. Alastair leverages more than a decade of experience with the PCI DSS to discuss: The types of evidence the PCI DSS requires, whether there are any new evidence types in v4 and preparing evidence in advance of

en

19:45

EDPB Opinion on Data Protection Issues in Artificial...

InfoSec Insider ·

2025/01/02

In this episode of InfoSec Insider – Talk DP, Stuart Skelly, Senior Data Protection Consultant at URM, breaks down a recent opinion issued by the EU Data Protection Board (EDPB) in response to questions from the Irish Data Protection Commission (DPC) on the compliant processing of personal data in the development and deployment stages of artificial intelligence (AI) models. Stuart draws upon his 25+ years of experience in data protection to discuss: What the EDPB is and how the opinion it has

en

21:35

Mitigating Cyber Risks

InfoSec Insider ·

2024/12/19

In this episode of InfoSec Insider – Talk Cyber, George Ryan, Consultant at URM, breaks down the current state of cyber security in the modern business landscape and the common cyber security failings and challenges he sees organisations face, as well as offering key advice and guidance on what organisations can do to protect against these threats. George leverages his extensive experience assisting organisations to enhance their cyber security to discuss:The current cyber security landscape and

en

18:28

Mistakes to Avoid When Implementing & Maintaining an...

InfoSec Insider ·

2024/12/12

In this episode of InfoSec Insider, Wayne Armstrong, Senior Consultant at URM, breaks down the common mistakes and challenges organisations come up against on both sides of their certification assessment, i.e., before the external assessment when the Information Security Management System (ISMS) is first being implemented, and after certification has been achieved and the ISMS is being maintained. Wayne leverages his 30+ years of experience in information security and risk management to

en

29:05

Who Needs a ROPA and Why?

InfoSec Insider ·

2024/12/05

In this episode of InfoSec Insider – Talk DP, Stuart Skelly, a Senior GRC Consultant at URM, explains records of processing activities (ROPAs), a key document that almost every organisation must create and maintain in order to comply with the General Data Protection Regulation (GDPR). Stuart leverages his 25+ years of specialisation in data protection law to discuss: What a ROPA is, which organisations need to have one The advantages of having a ROPA in place and how this can benefit your

en

17:22

ISO 42001 and AI Perspectives

InfoSec Insider ·

2024/11/28

In this episode of InfoSec Insider, Neil Jones, Senior Consultant at URM, breaks down the purpose and structure of the recently released ISO 42001, the International Standard for Artificial Intelligence Management Systems (AIMS), as well as explaining the Standard’s use of AI ‘perspectives’. Neil leverages his 20+ years’ working with a range of risk and information security-related standards to discuss: What ISO 42001 is intended for, and what it is not How ISO 42001 is structured, and how it

en

19:05

Data Protection Considerations for Monitoring Employees

InfoSec Insider ·

2024/11/21

In this episode of InfoSec Insider – Talk DP, Martin Brazier, Senior Data Protection Consultant at URM, explores the challenges of maintaining data protection compliance whilst conducting workplace monitoring, particularly in light of the workforce’s ever-increasing mobility, and how these challenges can be overcome. Martin leverages his 20+ years of experience in information management and data protection compliance to discuss: The definition of workplace monitoring and recent advances in

en

12:49

What is the CIA Security Triad?

InfoSec Insider ·

2024/11/14

In this episode of InfoSec Insider, Les Krause-Whiteing, Senior Consultant at URM, breaks down the concepts of confidentiality, integrity and availability (CIA), the 3 fundamental principles on which strong information security is built, and why they are so important to the effective and comprehensive information security management. Les draws upon his extensive experience helping organisations enhance their information security to discuss: What the CIA security triad is How the principles of

en

20:39

Data Protection Considerations for Artificial...

InfoSec Insider ·

2024/11/07

In this episode of InfoSec Insider – Talk DP, Martin Brazier, Senior Data Protection Consultant at URM, explores some of the considerations and challenges of maintaining compliance with data protection legislation, such as the General Data Protection Regulation (GDPR), when developing and deploying artificial intelligence (AI) technology. Martin leverages his 20+ years of experience in information management and data protection compliance to discuss: The definition of AI How the UK legislative

en

12:39

ISO, IAF and Climate Change Considerations

InfoSec Insider ·

2024/10/31

In this episode of InfoSec Insider, Stuart Moran, Senior Consultant at URM, explores the addition of climate change considerations to 31 management system standards by the International Standards Organization (ISO) and the International Accreditation Forum (IAF). Stuart draws upon more than 20 years of experience working with a wide range of ISO management system standards to discuss: What the ISO/IAF climate change amendment is How different industries might face unique challenges in

en

20:13

Top Tips for GDPR Compliance

InfoSec Insider ·

2024/10/24

In this episode of InfoSec Insider – Talk DP, Stuart Skelly, Senior Data Protection Consultant at URM, provides some hints and tips on how to achieve and maintain compliance with the General Data Protection Regulation (GDPR), with a particular focus on the key documentation organisations need to have in place to comply. Stuart leverages over 25 years of experience to discuss: The importance of maintaining documented evidence of your GDPR compliance under the ‘accountability’ principle Some of

en

13:32

Common Pitfalls with ISO 27001

InfoSec Insider ·

2024/10/17

In this episode of InfoSec Insider, Frazer Grudgings, Senior Consultant at URM, highlights the common pitfalls and mistakes he frequently sees organisations make when implementing ISO 27001, and explores the steps you can take to avoid these pitfalls. Frazer draws upon his 15+ years of experience assisting organisations to implement ISO 27001 to discuss: The most common mistakes made and challenges faced by organisations implementing ISO 27001 How to avoid making these mistakes and ensure your

en

19:03

Facial Recognition Technology

InfoSec Insider ·

2024/10/10

In this episode of InfoSec Insider – Talk DP, Martin Brazier, Senior Consultant at URM, explores the key challenges of and considerations for maintaining data protection compliance when using facial recognition technology (FRT). Martin leverages his 20+ years of specialism in information management and data protection to discuss: The different types of FRT and what they are used for Real-world examples of FRT deployments by organisations and of an organisation facing enforcement action for

en

30:27

ISO 9001 Implementation

InfoSec Insider ·

2024/10/03

In this episode of InfoSec Insider, Sue West, one of URM’s Senior Consultants, breaks down 2 of her ‘golden rules’ for successful implementation of ISO 9001, the International Standard for Quality Management Systems (QMS’). Sue leverages more than 25 years of experience establishing, managing and auditing QMS’ to provide key insights on: The meaning of top management ‘leadership and commitment’ in the context of ISO 9001 and why it is important to the success of an ISO 9001 implementation

en

14:54

Fines Imposed by the ICO in 2023

InfoSec Insider ·

2024/09/26

In this episode of InfoSec Insider – Talk DP, Stuart Skelly, a Senior GRC Consultant at URM, provides a break down and analysis of the enforcement actions delivered since the beginning of 2023 by the Information Commissioner’s Office (ICO), the UK’s privacy regulator, to highlight emerging trends and lessons that can be learned from how the ICO enforces data protection legislation such as the UK General Data Protection Regulation (GDPR) and the Privacy and Electronic Communications Regulations

en

11:37

PCI DSS – New Requirements for E-Commerce

InfoSec Insider ·

2024/09/19

In this episode of InfoSec Insider, Alastair Stewart, Payment Card Industry Qualified Security Assessor (PCI QSA) and Senior Consultant at URM, explores some of the new requirements for e-commerce pages in version 4.0 of the PCI Data Security Standard (PCI DSS), providing valuable advice and guidance on what organisations can do to remain PCI DSS compliant as they transition to v4.0. Alastair leverages his 10+ years of experience assisting organisations to comply with the PCI DSS to discuss: What

en

64 results

Similar Podcasts

TaxTalent.com The Golden Rule Podcast

Adam Golden

TaxTalent.com Podcast

Tony Santiago

Handelsblatt Crime - spannende Streitfälle der deutschen Wirtschaft

Ina Karabasz, Solveig Gode, Sönke Iwersen

Deffner und Zschäpitz – Der Wirtschafts-Talk von WELT

WELT

Black Box - La scatola nera della finanza

Guido Brera e Gian Luca Comandini -...