InfoSec Insider

The InfoSec Insider podcast brings you weekly interviews with practicing senior consultants, who draw upon their extensive experience to provide detailed and practical guidance on all things information and cyber security, data protection compliance, risk management, and more. In each episode, one of our experts takes a deep-dive into a particular aspect of their area of specialism, whether that be certifying to ISO 27001, outlining some top tips for GDPR compliance, making the case for alternative approaches to pen testing, or discussing how to conduct an effective business impact analysis (BIA). Enhance your understanding and professional skillset with the InfoSec Insider podcast, brought to you by URM, the UK’s leading provider of cyber security and governance, risk management and compliance consultancy.

InfoSec Insider is a business podcast hosted by URM Consulting, with 100 episodes on record and a Required Pod Score of 80.

URM Consulting hosts InfoSec Insider, a business show with 100 episodes published.

Our AI reads these to draft pitches. Use them as grounding for a pitch that cites a real guest and a specific topic.

• 

  Episode #105

  Successful Business Continuity Exercises: From Planning to Practice

  Sep 30, 202649 min

  In this episode of InfoSec Insider – Talk BC, Phil Knight, Senior Consultant at URM, explores the different types of business continuity exercises organisations can undertake and what makes an exercise genuinely effective. Drawing on his extensive experience supporting organisations with business continuity and resilience, Phil discusses: The different types of business continuity exercises, from walkthroughs and tabletop exercises to simulations and full-scale exercises How to choose the right type of exercise based on your organisation’s needs, objectives and available resources The importance of realistic scenarios, careful planning and securing stakeholder buy-in The role of effective facilitation in keeping participants engaged and ensuring exercises deliver meaningful results How to capture lessons learned and turn the outcomes of an exercise into practical improvements to business continuity arrangements Phil also shares real-world examples of business continuity exercises, demonstrating how realistic testing can uncover gaps that may otherwise remain hidden until a genuine disruption occurs. Have a question about business continuity? Submit your question using the link below or leave it in the comments, and we may answer it in a future episode of InfoSec Insider – Talk BC. Please use the form here: https://urmconsulting.com/podcasts/successful-business-continuity-exercises-from-planning-to-practice You can find more episodes of InfoSec Insider here: https://urmconsulting.com/podcasts Brought to you by URM, the UK’s leading information and cyber security specialists.

  ListenShow Notes
• 

  Episode #104

  The Lawful Basis Minefield: Why Getting It Wrong Undermines Everything

  Sep 23, 202641 min

  In this episode of InfoSec Insider – Talk DP, Aimee Brown and Rachael Salter, both Consultants at URM, explore lawful basis under the General Data Protection Regulation (GDPR), why choosing the right basis is fundamental to compliant processing, and some of the common mistakes organisations make in practice. Aimee and Rachael discuss: Why identifying the correct lawful basis is fundamental to GDPR compliance Why organisations so often misuse consent and how to determine whether it is appropriate How legitimate interests, legal obligation, public task and vital interests apply in practice What changes when processing special category personal data The most common lawful basis mistakes and how organisations can avoid them. Your questions matter If there’s a data protection or GDPR issue you’d like us to explore, share it with us: https://urmconsulting.com/podcasts/the-lawful-basis-minefield-why-getting-it-wrong-undermines-everything We’ll use listener questions to guide future discussions and ensure our episodes tackle the challenges that matter most to businesses like yours. You can find more episodes of InfoSec Insider here: https://urmconsulting.com/podcasts Brought to you by URM, the UK’s leading information and cyber security specialists.

  ListenShow Notes
• 

  Episode #103

  Cyber Security Training, Awareness and Benefits of Tailored Training

  Sep 16, 202631 min

  In this episode of InfoSec Insider, George Ryan and Jack Woods, both Consultants at URM, provide practical advice on how organisations can improve cyber security training and awareness, and why tailoring training to specific roles, responsibilities and risks can help build a stronger security culture. George Ryan and Jack Woods draw upon their experience of helping organisations strengthen their information security to discuss: The difference between cyber security training, awareness and competence, and why organisations should understand the distinction Why a one-size-fits-all approach to cyber security training may provide a useful baseline, but often fails to address the different risks faced by specific roles, teams and sectors How tailored training can make cyber security more relevant to employees, encourage behavioural change and help organisations develop a stronger security culture How the growing use of AI is creating new security risks and training requirements, as well as new opportunities to make cyber security awareness more effective And more. If there's a GRC or cyber security related issue you'd like us to explore, share it with us here here: https://urmconsulting.com/podcasts/cyber-security-training-awareness-and-benefits-of-tailored-training We use listener questions to guide future discussions and ensure our episodes tackle the challenges that matter most to organisations like yours. You can find more episodes of InfoSec Insider here: https://urmconsulting.com/podcasts Brought to you by URM, the UK’s leading information and cyber security specialists.

  ListenShow Notes
• 

  Episode #102

  PCI DSS Compensating Controls vs. Customized Approach

  Sep 9, 202632 min

  In this episode of InfoSec Insider, Alastair Stewart and Tibor Laczko, both Senior Consultants and Qualified Security Assessors (QSAs) with URM, examine one of the most frequently misunderstood areas of PCI DSS: the difference between compensating controls and the customised approach. Drawing on their extensive PCI DSS assessment experience, they discuss: The key differences between compensating controls and customised approaches, and the specific scenarios where each can be used Why compensating controls are not a “get out of jail free” card for non-compliance and the strict conditions that must be met before they can be applied The legal, regulatory, technical, and financial constraints that may justify the use of compensating controls How customised approaches were introduced in PCI DSS v4.0 to support innovative and non-traditional methods of meeting security objectives Why customised validations require significant planning, documentation, evidence collection, and assessor involvement before they can be approved And more. If there's a PCI DSS related issue you'd like us to explore, share it with us here here: https://urmconsulting.com/podcasts/pci-dss-compensating-controls-vs-customized-approach We use listener questions to guide future discussions and ensure our episodes tackle the challenges that matter most to organisations like yours. You can find more episodes of InfoSec Insider here: https://urmconsulting.com/podcasts Brought to you by URM, the UK’s leading information and cyber security specialists.

  ListenShow Notes
• 

  Episode #100

  The First 72 Hours Managing Data Breaches

  Aug 26, 202646 min

  In this episode of InfoSec Insider – Talk DP, Rachael Salter and Aimee Brown, both Consultants at URM, share their insights on how to effectively manage the immediate aftermath of a personal data breach. Aimee and Racheal draw on over 20 years’ combined data protection experience to discuss: What actually counts as a data breach and when it needs to be reported to the Information Commissioner’s Office (ICO) How organisations can assess risk and decide whether affected individuals need to be told The biggest mistakes organisations make in the first few days following a data breach How ransomware attacks, supplier incidents, and modern technology are changing breach management The practical steps organisations can take now to prepare for a breach and demonstrate accountability afterwards. Ask Rachael and Aimee a question: https://urmconsulting.com/podcasts/the-first-72-hours-managing-data-breaches You can find more episodes of InfoSec Insider here: https://urmconsulting.com/podcasts Connect with us on LinkedIn Brought to you by URM, the UK’s leading information and cyber security specialists.

  ListenShow Notes

Recent guests on InfoSec Insider. Study who booked and why before you pitch.

Based on semantic analysis of episode topics and host coverage, this show is a strong guest fit for executives in:

Industry fit is computed by PitchCentric using vector embeddings of the show's episode catalog.