URM's Consultancy Services

Ultima Risk Management (URM) is one of the UK's leading consultancies specialising in the areas of information security (ISO 27001) and governance, business continuity (BS 25999), risk management and data protection. The central tenet to URM's consultative approach is to ensure that all of its services are always 'tailored, appropriate, sustainable and balanced'.

ISO 27001 Certification and Compliance

URM offers a complete package of services relating to compliance and guaranteed certification to ISO 27001, the leading international Standard for information security. These include conducting business impact analyses and risk assessments, the development and implementation of risk treatment plans and the development of information security management systems (ISMS). (This includes polcies, processes, audits and security awareness programmes).

BS 25999 Certification and Compliance

BS 25999-2, the first ever Standard to be developed for business continuity management (BCM), was published in November 2007. Having been involved as the selected experts in the pilot BS 25999 certification projects, URM is uniquely positioned to assist organisations comply or certify with the new Standard and to provide advice and guidance on all stages of the BCM lifecycle from conducting risk assessments and developing strategies to the implementation and testing of business continuity plans.

Payment Card Industry - Data Security Standard (PCI-DSS)

PCI DSS was developed by the founding payment brands of the PCI Security Standards Council, to enforce consistent data security measures on organisations which process credit card transactions for the protection of card data. URM's consultants can assist organisations comply to PCI DSS. Typically this will involve conducting a gap analysis against the twelve requirements and then assisting with remediation activities in order to ensure full compliance.

Data Protection Consultancy

The issue of data leakage, particularly personal data, is one that continues to challenge both public and private sector organisations. URM's consultants have extensive experience in advising organisations how best to secure personal data and to comply with the Data Protection Act (DPA). URM's data protection services take a pragmatic approach to assisting organisations to assess their level of and achieve compliancy.

URM's consultants have vast experience of all aspects of information security, business continuity, PCI DSS and data protection compliance. Each consultant has spent a considerable number of years working in both the user community and external consultancies delivering successful projects that provide business benefit to organisations.