The InfoSec Insider podcast brings you weekly interviews with practicing senior consultants, who draw upon their extensive experience to provide detailed and practical guidance on all things information and cyber security, data protection compliance, risk management, and more. In each episode, one of our experts takes a deep-dive into a particular aspect of their area of specialism, whether that be certifying to ISO 27001, outlining some top tips for GDPR compliance, making the case for alternative approaches to pen testing, or discussing how to conduct an effective business impact analysis (BIA). Enhance your understanding and professional skillset with the InfoSec Insider podcast, brought to you by URM, the UK’s leading provider of cyber security and governance, risk management and compliance consultancy.
In this episode of InfoSec Insider – Talk Cyber, Wayne Armstrong, Senior Consultant at URM, and Mike Emery, Senior Security Consultant at URM, explore how organisations can build greater cyber resilience in the face of an increasingly sophisticated threat landscape. Drawing on practical experience, they examine where organisations are most vulnerable and discuss the steps businesses can take to strengthen their defences and prepare for cyber incidents.
The episode explores:
Today’s cyber threat landscape and common organisational weaknesses, including phishing, impersonation and spoofing, malware and ransomware, as well as the risks created by human error, poor access management, unpatched systems and third-party suppliers.
Practical approaches to strengthening cyber resilience, from understanding and assessing information assets and cyber risks to improving security awareness, access controls, supplier management, vulnerability management and layered technical protection.
How to prepare for and respond effectively to cyber incidents, including developing and testing incident response plans, maintaining effective communications, protecting business continuity and considering the often-overlooked human impact of a cyber breach.
You can find more episodes of InfoSec Insider here: https://urmconsulting.com/podcasts
Brought to you by URM, the UK’s leading information and cyber security specialists.
1 Oct 2026
Successful Business Continuity Exercises: From Planning to Practice
In this episode of InfoSec Insider – Talk BC, Phil Knight, Senior Consultant at URM, explores the different types of business continuity exercises organisations can undertake and what makes an exercise genuinely effective. Drawing on his extensive experience supporting organisations with business continuity and resilience, Phil discusses:
The different types of business continuity exercises, from walkthroughs and tabletop exercises to simulations and full-scale exercises
How to choose the right type of exercise based on your organisation’s needs, objectives and available resources
The importance of realistic scenarios, careful planning and securing stakeholder buy-in
The role of effective facilitation in keeping participants engaged and ensuring exercises deliver meaningful results
How to capture lessons learned and turn the outcomes of an exercise into practical improvements to business continuity arrangements
Phil also shares real-world examples of business continuity exercises, demonstrating how realistic testing can uncover gaps that may otherwise remain hidden until a genuine disruption occurs.
Have a question about business continuity? Submit your question using the link below or leave it in the comments, and we may answer it in a future episode of InfoSec Insider – Talk BC.Please use the form here: https://urmconsulting.com/podcasts/successful-business-continuity-exercises-from-planning-to-practice
You can find more episodes of InfoSec Insider here: https://urmconsulting.com/podcasts
Brought to you by URM, the UK’s leading information and cyber security specialists.
24 Sept 2026
The Lawful Basis Minefield: Why Getting It Wrong Undermines Everything
In this episode of InfoSec Insider – Talk DP, Aimee Brown and Rachael Salter, both Consultants at URM, explore lawful basis under the General Data Protection Regulation (GDPR), why choosing the right basis is fundamental to compliant processing, and some of the common mistakes organisations make in practice. Aimee and Rachael discuss:
Why identifying the correct lawful basis is fundamental to GDPR compliance
Why organisations so often misuse consent and how to determine whether it is appropriate
How legitimate interests, legal obligation, public task and vital interests apply in practice
What changes when processing special category personal data
The most common lawful basis mistakes and how organisations can avoid them.
Your questions matter
If there’s a data protection or GDPR issue you’d like us to explore, share it with us: https://urmconsulting.com/podcasts/the-lawful-basis-minefield-why-getting-it-wrong-undermines-everything
We’ll use listener questions to guide future discussions and ensure our episodes tackle the challenges that matter most to businesses like yours.
You can find more episodes of InfoSec Insider here: https://urmconsulting.com/podcasts
Brought to you by URM, the UK’s leading information and cyber security specialists.
Who has been a guest on InfoSec Insider
Names identified in recent episode analyses. Showing up to five guests.
Jack Woods
Rachael Salter
Aimee Brown
Alastair Stewart
Tibor Laczko
Reach and audience
Public platform figures. Ratings count people who left a rating, not total listeners.
Spotify
5.0 / 5
1 ratings
Podcast Authority Score: 41 / 100
A composite of feed quality, social presence, YouTube performance and engagement. Read the methodology.
Quality
70
Social presence
0
YouTube
0
Engagement
32
Contact InfoSec Insider
Guest appearances
Books guests
Based on episode analysis; this does not confirm that the show is currently accepting guests.
Questions about InfoSec Insider
Who hosts InfoSec Insider?
George Ryan host the show. Published by URM Consulting.
How often do new episodes come out?
The show publishes daily, based on its RSS feed.
Does InfoSec Insider take guests?
Yes. Guests have been identified in episode analyses.
Host of InfoSec Insider?
Claim your podcast to manage its listing and keep your show details accurate.
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show Podcast research with Pod Engine
