x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

InfoSec Insider

The InfoSec Insider podcast brings you weekly interviews with practicing senior consultants, who draw upon their extensive experience to provide detailed and practical guidance on all things information and cyber security, data protection compliance, risk management, and more. In each episode, one of our experts takes a deep-dive into a particular aspect of their area of specialism, whether that be certifying to ISO 27001, outlining some top tips for GDPR compliance, making the case for alternative

business management

All Episodes

14:00

The Core Functions of NIST CSF – Identify

InfoSec Insider ·

2026/03/05

In this episode of InfoSec Insider – Talk Cyber, Mark O’Kane, Consultant at URM, explains the second of the NIST Cybersecurity Framework’s (CSF’s) five core functions, the Identify function, sharing his insights on what organisations can do in practice to meet its requirements. Mark uses his extensive experience working in information security and risk management to discuss:Where the Identify function sits within the overall NIST CSF How your organisation can meet the requirements around

en

29:22

Preparing for a PCI DSS Assessment

InfoSec Insider ·

2026/02/26

In this episode of InfoSec Insider, Alastair Stewart and Tibor Laczko, both Senior Consultants and Qualified Security Assessors (QSAs) at URM, share their perspective on how organisations can most effectively and efficiently prepare for a Payment Card Industry Data Security Standard (PCI DSS) assessment. Alastair and Tibor leverage nearly 30 years’ combined experience with the PCI DSS to discuss:  Practical steps teams can take to ensure the assessment runs smoothly overall What you should have

en

34:45

Workplace Privacy in a Hybrid World: Monitoring,...

InfoSec Insider ·

2026/02/19

In this episode of InfoSec Insider – Talk DP, Rachael Salter and Aimee Brown, Data Protection Consultants at URM, explore the challenges of workplace privacy and data protection compliance in a hybrid business landscape, and how these challenges can be overcome. Rachael and Aimee leverage over 20 years’ combined experience in data protection to discuss:Why employee data is becoming such a significant risk for businesses The legal and ethical boundaries when monitoring employees Why operational

en

31:11

Minimising the Impact if a Breach Occurs

InfoSec Insider ·

2026/02/12

In this episode of InfoSec Insider – Talk Cyber, Jack Woods and George Ryan, both Consultants at URM, outline the steps organisations can take to ensure they are prepared in the event of a cyber breach and able to minimise the impact of a breach as much as possible. George and Jack leverage their extensive experience helping organisations strengthen their cyber and information security posture to discuss: The importance of approaching cyber security breaches as a question of ‘when’ not ‘if’, and

en

18:51

The Core Functions of NIST CSF - Govern

InfoSec Insider ·

2026/02/05

In this episode of InfoSec Insider, Mark O’Kane, Consultant at URM, explores the National Institute of Standards and Technology Cybersecurity Framework’s (NIST CSF’s) newly introduced Govern Function, outlining its purpose and significance within version 2.0 of the Framework. Mark examines each of its six Categories in detail, from defining organisational context and risk management strategy to establishing oversight and supply chain risk management, and explain the policies, processes and

en

27:40

Data Protection by Design and by Default

InfoSec Insider ·

2026/01/29

In this episode of InfoSec Insider – Talk DP, Aimee Brown and Rachael Salter, both Data Protection Consultants at URM, share their insights on the principle of data protection (DP) by design and by default, particularly as it relates to small and medium-sized enterprises (SMEs). Rachael and Aimee leverage over 20 years’ combined experience in data protection to discuss:What ‘data protection by design and by default’ means under the UK General Data Protection Regulation (GDPR) Why this approach is

en

51:39

Reducing the Likelihood of a Security Breach

InfoSec Insider ·

2026/01/22

In this episode of InfoSec Insider – Talk Cyber, Jack Woods and George Ryan, both Consultants at URM, explain the steps organisations can take to reduce the likelihood of suffering a security breach. George and Jack leverage their extensive experience helping organisations strengthen their cyber and information security posture to discuss:What constitutes a security breach and how they are commonly caused Where to start in strengthening your organisation’s defences and the key measures you should

en

13:05

The Defence Cyber Certification

InfoSec Insider ·

2026/01/15

In this episode of InfoSec Insider – Talk Cyber, George Ryan, Consultant at URM, breaks down the Defence Cyber Certification (DCC), a new certification framework developed by the Ministry of Defence (MoD) and IASME for UK defence suppliers. George draws upon his extensive experience helping organisations strengthen their cyber security to discuss:What the DCC is and who it’s for The four levels of compliance in the DCC, what they mean and how they work How the DCC can benefit organisations in the

en

23:18

Data Protection Considerations for Artificial...

InfoSec Insider ·

2026/01/14

In this episode of InfoSec Insider – Talk DP, Martin Brazier, Senior Data Protection Consultant at URM, explores the considerations organisations should make to maintain data protection (DP) compliance in their development and deployment of artificial intelligence (AI) systems. Martin leverages his 20+ years’ specialisation in DP and information management to discuss: What AI is The current AI regulatory framework and how it’s evolving How the 7 core principles of the General Data Protection

en

33:58

PCI DSS: Standards vs. Reality

InfoSec Insider ·

2025/12/18

In this episode of InfoSec Insider, Alastair Stewart and Tibor Laczko, both Senior Consultants and Qualified Security Assessors (QSAs) at URM, explore the theory versus the reality of compliance with the Payment Card Industry Data Security Standard (PCI DSS). Alastair and Tibor leverage nearly 30 years’ combined experience with the PCI DSS to discuss: Whether it would be cheaper to simply pay the fines instead of being PCI DSS compliant How often they see organisations treat PCI as a one-time

en

14:52

Clearview AI Case

InfoSec Insider ·

2025/12/11

In this episode of InfoSec Insider – Talk DP, Stuart Skelly, Senior Consultant at URM, breaks down the Upper Tribunal’s recent decision to uphold the ICO’s appeal in the Clearview AI case, sharing his insights on the meaning and impact of this development. Stuart draws upon over 25 years of specialisation in data protection law to discuss:The Clearview AI case and how it has developed since the ICO’s 2022 decision to impose a £7.5m fine on Clearview The Upper Tribunal’s ruling and how it has

en

17:22

ISO 27001 - Clause 5.1 Leadership and Commitment...

InfoSec Insider ·

2025/12/04

In this episode of InfoSec Insider, Frazer Grudings, Senior Consultant at URM, shares his insights on Clause 5.1 of ISO 27001, which covers the leadership and commitment requirements for an information security management system (ISMS) that is conformant to the Standard. Frazer draws upon over 15 years of information security experience to discuss:The requirements of Clause 5.1 and what conformance to this Clause involves Why leadership and commitment matter to an ISMS What can go wrong when

en

27:42

PCI DSS – The Overlooked Systems

InfoSec Insider ·

2025/11/27

In this episode of InfoSec Insider, Alastair Stewart and Tibor Laczko, both Senior Consultants and Qualified Security Assessors (QSAs) at URM, offer their advice on the systems and controls that are often overlooked in relation to the Payment Card Industry Data Security Standard (PCI DSS). Alastair and Tibor leverage nearly 30 years’ combined experience with the PCI DSS to discuss: Why the PCI DSS covers systems that don’t store card data, such as DNS servers or time servers Why time

en

42:08

Data Protection Rights

InfoSec Insider ·

2025/11/20

In this episode of InfoSec Insider – Talk DP, Rachael Salter and Aimee Brown, both Consultants at URM, explore individuals’ rights under the GDPR beyond the right of access (the most widely discussed of the data subject rights), and the requirements and obligations on organisations handling these. Rachael and Aimee draw upon over 20 years’ combined experience in data protection to discuss:The data rights aside from the right of access that tend to unexpectedly consume business resources and

en

12:37

7 Top Tips for Communicating in a Crisis

InfoSec Insider ·

2025/11/13

In this episode of InfoSec Insider, Martin Brazier, Senior Consultant at URM, shares his top tips on crisis communication, considering the steps organisations can take to prepare before a crisis occurs, while it is happening, and after it’s been dealt with to ensure communication is as effective and seamless as possible. Martin draws upon his extensive experience helping organisations enhance their business continuity to discuss:What a ‘crisis’ is What crisis communication is and how it fits into

en

24:33

Building Cyber Security Resilience Against Phishing

InfoSec Insider ·

2025/11/06

In this episode of InfoSec Insider – Talk Cyber, George Ryan, Consultant at URM, provides his insights into phishing and what organisations can do to protect themselves against it. George draws upon his extensive experience helping organisations strengthen their cyber security to discuss:What phishing is and the various forms it takes How phishing achieves its goal by influencing behaviour, and how artificial intelligence (AI) impacts this The steps organisations can take to protect themselves

en

36:45

ISO 27001 People Controls

InfoSec Insider ·

2025/10/30

In this episode of InfoSec Insider, Jack Woods and Mark O’Kane, both Consultants at URM, take a deep dive on the ‘People’ controls theme in ISO 27001, and why these controls matter in today’s hybrid workplaces, how they strengthen information security, and what auditors look for during assessments. Jack and Mark draw upon their extensive experience supporting organisations’ implementation of the Standard to discuss:How to balance the risk of potential insider threats against the downsides of

en

8:19

AIIAs in ISO 42001

InfoSec Insider ·

2025/10/23

In this episode of InfoSec Insider, Neil Jones, Senior Consultant at URM, explores artificial intelligence impact assessments (AIIAs), a key conformance activity required by ISO 42001, the International Standard for AI Management Systems (AIMS). Neil leverages over 20 years of experience working with risk and information security-related standards to discuss:What an AIIA is under ISO 42001, and how it differs from a typical risk assessment The role of ISO 42005 and how it relates to AIIAs The

en

29:27

The People Side of PCI DSS

InfoSec Insider ·

2025/10/16

In this episode of InfoSec Insider, Alastair Stewart and Tibor Laczko, both Senior Consultants and Qualified Security Assessors (QSAs) at URM, offer advice on compliance with the Payment Card Industry Data Security Standard (PCI DSS), with a particular focus on the ‘human’ element of security. Alastair and Tibor leverage nearly 30 years’ combined experience with the PCI DSS to discuss:How you can minimise the risk of noncompliance caused by human error or behaviour The compliance complications

en

24:34

DSARs: A Business Burden vs. a Data Protection...

InfoSec Insider ·

2025/10/09

In this episode of InfoSec Insider – Talk DP, Rachael Salter and Aimee Brown, both Data Protection Consultants at URM, provide their insights on overcoming data subject access request (DSAR) challenges and how organisations can gain benefits from the fulfilment of DSARs, rather than treating them purely as a business burden. Rachael and Aimee leverage over 20 years’ combined experience in data protection to discuss: • Whether DSARs can actually enhance customer trust, or are simply a compliance

en

75 results

Similar Podcasts

TaxTalent.com The Golden Rule Podcast

Adam Golden

TaxTalent.com Podcast

Tony Santiago

Handelsblatt Crime - spannende Streitfälle der deutschen Wirtschaft

Ina Karabasz, Solveig Gode, Sönke Iwersen

Deffner und Zschäpitz – Der Wirtschafts-Talk von WELT

WELT

Black Box - La scatola nera della finanza

Guido Brera e Gian Luca Comandini -...