InfoSec Insider

The InfoSec Insider podcast brings you weekly interviews with practicing senior consultants, who draw upon their extensive experience to provide detailed and practical guidance on all things information and cyber security, data protection compliance, risk management, and more. In each episode, one of our experts takes a deep-dive into a particular aspect of their area of specialism, whether that be certifying to ISO 27001, outlining some top tips for GDPR compliance, making the case for alternative approaches to pen testing, or discussing how to conduct an effective business impact analysis (BIA). Enhance your understanding and professional skillset with the InfoSec Insider podcast, brought to you by URM, the UK’s leading provider of cyber security and governance, risk management and compliance consultancy.

InfoSec Insider is a business podcast hosted by URM Consulting, with 98 episodes on record and a Required Pod Score of 80. PitchCentric scores this show on Booking Probability, Listen Score, and live audience signals refreshed every 24 hours.

URM Consulting hosts InfoSec Insider, a business show with 98 episodes published.

Our AI reads these to draft pitches. Use them as grounding for a pitch that cites a real guest and a specific topic.

• 

  Episode #99

  Cyber Essentials 2026 – Lessons Learned From Actual Assessments

  Aug 19, 202636 min

  In this episode of InfoSec Insider – Talk Cyber, Jamie Leavers, Security Consultant at URM, and Lauren Gotting, New Business Director at URM, share real-world lessons learned from conducting hundreds of CE and CE+ assessments, including early assessments against the new Danzell requirements. Jamie and Lauren leverage their extensive experience with the Cyber Essentials scheme to discuss: Lessons from real CE/CE+ assessments, what assessors are seeing in practice, and what separates successful submissions from failed ones The Danzell Question Set and key changes introduced in 2026 and how they impact both new applicants and recertifying organisations How to prepare for certification or recertification, including ractical guidance to ensure your evidence, scope and controls meet assessor expectations. The common issues and pitfalls most frequently causing delays or failures and how to avoid them entirely. Learn more about URM’s webinar programme: https://www.urmconsulting.com/events/upcoming-events Contact webinars@urmconsulting.com for this webinar’s slide deck. You can find more episodes of InfoSec Insider here: https://urmconsulting.com/podcasts Brought to you by URM, the UK’s leading information and cyber security specialists.

  ListenShow Notes
• 

  Episode #98

  Physical Security Controls

  Aug 12, 202625 min

  In this episode of InfoSec Insider, George Ryan and Jack Woods, both Consultants at URM, provide expert advice and guidance on how organisations can maintain the physical security of their information, and where physical security most often goes wrong. George and Jack draw upon their extensive combined experience of helping organisations strengthen their information security to discuss: Whether organisations are underestimating the importance of physical security in favour of focusing on cyber threats How hybrid working, flexible offices, and remote employees have changed what ‘physical security’ actually means The most surprising physical security weakness they’ve encountered that could have led to a major information security breach Which physical security controls most organisations think is effective, but in reality provide little more than a false sense of security The top three physical controls they would implement in an organisation with a limited budget and why. Ask Jack and George a question: https://urmconsulting.com/podcasts/physical-security-controls You can find more episodes of InfoSec Insider here: https://urmconsulting.com/podcasts Brought to you by URM, the UK’s leading information and cyber security specialists.

  ListenShow Notes
• 

  Episode #97

  PCI DSS Periodic Activities

  Aug 5, 202637 min

  In this episode of InfoSec Insider, Alastair Stewart and Tibor Laczko, both Senior Consultants and Qualified Security Assessors (QSAs) with URM, share their insights on complying with periodic requirements within the Payment Card Industry Data Security Standard (PCI DSS). Alastair and Tibor leverage nearly 30 years’ combined experience with the PCI DSS to discuss: Why PCI DSS v4 moved away from fixed frequencies and towards risk-based intervals for some controls The common mistakes they see organisations make when defining their own frequencies Whether the introduction of Requirement 12.3.1 has improved security outcomes or simply increased documentation requirements How PCI DSS targeted risk analysis (TRA) differs from an enterprise risk assessment and why organisations frequently confuse the two How to determine appropriate activity frequency and the evidence that shows QSAs an organisation’s chosen frequency is reasonable How to meet specific requirements such as Periodic Evaluation of Systems Not Considered at Risk from Malware, Application and System Account Reviews, and Change and Tamper Detection Mechanisms And more. Ask Alastair and Tibor a question: https://urmconsulting.com/podcasts/pci-dss-periodic-activities If you enjoyed this episode of InfoSec Insider, you can leave us a rating and review here: https://ratethispodcast.com/infosecinsider You can find more episodes of InfoSec Insider here: https://urmconsulting.com/podcasts Connect with us on LinkedIn Brought to you by URM, the UK’s leading information and cyber security specialists.

  ListenShow Notes
• 

  Episode #96

  GDPR Cookies Compliance

  Jul 29, 202638 min

  In this episode of InfoSec Insider – Talk DP, Aimee Brown and Rachael Salter, both Consultants at URM, break down cookies compliance under the General Data Protection Regulation (GDPR) and Privacy and Electronic Communications Regulations (PECR). Aimee and Racheal draw on over 20 years’ combined data protection experience to discuss: Why cookies are so important to businesses commercially What the law actually requires when using cookies How businesses get cookie compliance wrong in practice Where consent or pay fits in What good compliance actually looks like. Ask Rachael and Aimee a question: https://urmconsulting.com/podcasts/gdpr-cookies-compliance If you enjoyed this episode of InfoSec Insider, you can leave us a rating and review here: https://ratethispodcast.com/infosecinsider You can find more episodes of InfoSec Insider here: https://urmconsulting.com/podcasts Connect with us on LinkedIn Brought to you by URM, the UK’s leading information and cyber security specialists.

  ListenShow Notes
• 

  Episode #95

  Clause 10.2 of ISO 27001: Nonconformity and Corrective Action

  Jul 22, 202611 min

  In this episode of InfoSec Insider, Neil Jones, Senior Consultant at URM, shares key advice and guidance on ISO 27001 Clause 10.2 (Nonconformity and corrective action), its requirements and how organisations can meet them. Neil leverages over 20 years of experience working with risk and information security-related standards to discuss: What Clause 10.2 is and why it is important for organisations managing problems with their information security management system (ISMS) What nonconformities are, and the difference between major and minor nonconformities The requirements of Clause 10.2 and how organisations can implement them in practice Common mistakes to avoid when addressing Clause 10.2. Learn more about this topic: https://www.urmconsulting.com/blog/iso-27001-clause-10-2-nonconformity-and-corrective-action If you enjoyed this episode of InfoSec Insider, you can leave us a rating and review here: https://ratethispodcast.com/infosecinsider You can find more episodes of InfoSec Insider here: https://urmconsulting.com/podcasts Brought to you by URM, the UK’s leading information and cyber security specialists.

  ListenShow Notes

Recent guests on InfoSec Insider. Study who booked and why before you pitch.

Based on semantic analysis of episode topics and host coverage, this show is a strong guest fit for executives in:

Industry fit is computed by PitchCentric using vector embeddings of the show's episode catalog.