What URM Consulting Services does

URM Consulting Services Limited is a privately-held UK information security, data protection, business continuity, and risk management consultancy headquartered in Reading, founded in 2005, with 51-100 employees. The firm delivers advisory, gap analysis, implementation, and audit services across a deep stack of standards and regulations including ISO 27001, ISO 22301, PCI DSS (v4.0), SOC 2, CMMC, NIST CSF, GDPR/UK GDPR, ISO 42001, DORA, NIS 2, the EU AI Act, SWIFT CSP, and Cyber Essentials/Plus, supported by CREST-accredited penetration testing and incident response capabilities. Itself holding accreditations as a PCI QSA, BSI-licensed certification body, NCSC Assured Cyber Advisor, and IASME certification body (including DCC for the UK defence supply chain), URM operates as a licensed assessor for many of the same standards it consults on.

The company's underlying technology layer is the proprietary Abriska software suite — Abriska 27001 (information security risk management), Abriska 19011 (audit and action management), Abriska 27036 (supplier risk management), Abriska 22301 (business continuity), Abriska 31000 (enterprise risk) — plus the Alurna online awareness training platform. These tools are positioned as risk-management and compliance-enablement software that operationalises ISO-aligned processes for clients, and they also support the consultancy's own delivery.

URM's revenue is generated primarily through customised, quote-based professional services contracts (often multi-year) covering consultancy, training (CISMP, CDP, PCIRM, ISO/GDPR courses), and assessment/auditing, with a smaller recurring-revenue stream from Abriska/Alurna subscriptions. Go-to-market is sales-led and relationship-driven: leads are sourced via a UK-domiciled website, free consultations, an extensive webinar and content-marketing programme (often co-hosted with BSI, IASME, and DNV), and case-study evidence from named clients such as The ai Corporation, Smarter Technologies, Bollin Group, Biffa, and G2 Speech. The customer base is concentrated in UK organisations seeking compliance certification, with secondary segments in the UK defence supply chain and data-protection-focused entities.

Name

URM Consulting Services

Legal name

URM Consulting Services Limited

Website

https://urmconsulting.com

Company type

Private

Founded year

2005

Operating status

Operating

Headcount range

51–100 employees

Short description

URM Consulting Services is a UK-based information security, data protection, business continuity, and risk management consultancy delivering gap analysis, implementation, assessment, and accredited certification services (ISO 27001, PCI DSS, SOC 2, CMMC, GDPR, ISO 22301) to UK organisations, supported by a proprietary Abriska software suite and the Alurna training platform.

Ownership category

akta.pro rank

Product category

Information Security & Compliance Consulting

NAICS

Management Consulting Services (54161), Custom Computer Programming Services (541511)

SIC

Services-Management Consulting Services (8742), Services-Computer Programming Services (7371)

akta.pro primary industry

Risk Management (ERM), Operational Risk & Business Continuity (BPAEAPAJ)

akta.pro secondary industries

Enterprise Risk Management (ERM) Advisory (BPAHAFAA), Cybersecurity & Identity Consulting (BPAHAEAG)

Keywords

• Information security consulting
• ISO 27001 compliance
• PCI DSS assessment
• Data protection services
• Cyber security consulting

Headquarters

HQ city

Reading

HQ country

United Kingdom

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure

Revenue model

1. Consultancy Services: Professional consulting services for information security, data protection, business continuity, and risk management. Includes gap analysis, implementation, assessment, and auditing services for standards such as ISO 27001, PCI DSS, SOC 2, CMMC, NIST CSF, GDPR, and others.
2. Training Services: Classroom and webinar-based training courses including CISMP, CDP, PCIRM, ISO 27001 courses, GDPR courses, and other compliance-related training.
3. Software Products (Abriska Suite): Risk management and compliance software products including Abriska 27001, Abriska 19011, Abriska 27036, Abriska 22301, Abriska 31000, and Alurna training platform.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels5 records

Core offering

URM Consulting Services is a UK-based consultancy delivering cyber and information security, data protection, business continuity, and risk management services. The firm provides gap analysis, implementation support, assessment and auditing across standards such as ISO 27001, PCI DSS, SOC 2, CMMC, GDPR, ISO 22301, ISO 42001, NIS 2, DORA, Cyber Essentials, and SWIFT CSP. URM also sells a proprietary software suite (Abriska 27001, 19011, 27036, 22301, 31000) for risk and audit management and an online training platform (Alurna) that supports its consultancy practice.

Product overview

URM Consulting Services operates as a consultancy firm offering professional services across cyber and information security, data protection, business continuity, and risk management. Its product portfolio consists of six Abriska-branded software tools — Abriska 27001 (information security risk management), Abriska 19011 (audit and action management), Abriska 27036 (supplier risk management), Abriska 22301 (business continuity management), Abriska 31000 (enterprise risk management), and Alurna (online awareness training) — complemented by a structured range of consultancy, auditing, and training services covering standards such as ISO 27001, PCI DSS, SOC 2, CMMC, GDPR/UK GDPR, ISO 22301, ISO 42001, NIS 2, DORA, Cyber Essentials, and SWIFT CSP. The Abriska tools and training services function as the software and enablement layer supporting the broader consultancy practice.

Differentiator

Problem solved

Functional benefit

Brands

• Abriska: Risk management software suite including Abriska 27001 (Information Security Risk Management), Abriska 19011 (Audit and Action Management), Abriska 27036 (Supplier Risk Management), Abriska 22301 (Business Continuity Management), Abriska 31000 (Enterprise Risk Management)
• Alurna

Products and services

• Abriska 27001 Information Security Risk Management Software enabling organisations to manage information security risks in alignment with ISO 27001 requirements.
• Abriska 19011 Audit and Action Management Software for planning, conducting, and tracking audits and corrective actions in line with ISO 19011.
• Abriska 27036 Supplier Risk Management Software for managing information security risks from suppliers and the supply chain in accordance with ISO 27036.
• Abriska 22301 Business Continuity Management Software supporting organisations in managing business continuity arrangements in line with ISO 22301.
• Abriska 31000 Enterprise Risk Management Software for managing enterprise-wide risks in accordance with ISO 31000 principles.
• Alurna Online Awareness Training Tool providing interactive training to help organisations build staff awareness across information security, data protection, and related topics.
• Information Security Consultancy Services End-to-end consultancy including gap analysis, risk assessment, implementation, assessment and auditing, and virtual CISO services across ISO 27001, PCI DSS, SOC 2, CMMC, NIST CSF, GC RTS, SWIFT CSP, DORA, and related information security standards.
• Cyber Security Services CREST-accredited penetration testing, vulnerability scanning, social engineering assessments, incident response, Cyber Essentials / Cyber Essentials Plus certification, NIS 2 advisory, and Cyber Resilience Act services.
• Data Protection / GDPR Consultancy GDPR consultancy including gap analysis, DPIA, ROPA, DSAR handling, virtual DPO, data protection training and awareness, and DUAA compliance support.
• Business Continuity Consultancy ISO 22301 business continuity gap analysis, implementation, business impact analysis, and certification support.
• Training Services Classroom and webinar-based training courses covering CISMP, CDP, PCIRM, ISO 27001 Lead Auditor/Implementer, GDPR, and other compliance-related certifications.

Quantifiable outcome

• 450+ organisations achieved ISO 27001 certification with URM support

Named customers5 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

Four partnerships are on record, tiered core and minor.

• BSI (British Standards Institution)coreImplementation/ SI/ Consulting PartnerURM collaborates with BSI, the UK's leading certification body, to deliver ISO 27001 certification webinars and round table events. The partnership combines BSI's certification capabilities with URM's implementation expertise to help organisations achieve and maintain ISO 27001 certification.
• IASMEcoreTechnology or IntegrationURM is a licensed certification body for Cyber Essentials and Cyber Essentials Plus, operating under the IASME consortium which manages the scheme on behalf of NCSC. URM also provides DCC certification under the IASME/MoD partnership.
• National Cyber Security Centre (NCSC)coreTechnology or IntegrationURM is an accredited Assured Service Provider under the NCSC Cyber Advisor scheme, providing practical, cost-effective and reliable advice to improve cyber security and achieve Cyber Essentials certification.
• DNVminorStrategic or Co-development PartnerURM collaborated with DNV to deliver a webinar on 'Beyond ISO 27001 - DORA and NIS 2', providing an overview of ISO 27001, DORA, and NIS 2 for cybersecurity and operational resilience.

Scale indicators2 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• A-LIGN: Global compliance and cyber security advisory firm specialising in SOC 2, ISO 27001, PCI DSS, and HITRUST assessments. Comparable multi-framework compliance audit and advisory offering.
• Bridewell: UK-based cyber security services firm providing consultancy, pen testing, and managed security across ISO 27001, PCI DSS, SOC, and NIS regulations. Direct peer in cyber advisory and compliance services.
• Pentest People: UK-based CREST-accredited penetration testing and cyber security consultancy. Direct peer in CREST-accredited pen testing and security assurance services sold to UK enterprises.
• Adarma: UK-based cyber security consultancy and managed detection provider. Comparable to URM in UK enterprise and mid-market cyber advisory focus, with a wider managed SOC angle.
• IT Governance: UK-based GRC and cyber compliance consultancy offering ISO 27001, Cyber Essentials, PCI DSS, and GDPR services. Closely comparable to URM in geography, service mix, standards coverage, and target customer base.
• Schellman: US-based compliance and cyber assessment firm (SOC 2, ISO 27001, PCI DSS, HITRUST). Direct peer in audit and certification-adjacent advisory work with similar multi-framework positioning.

Broad incumbents

• NCC Group: Large UK-listed cyber security and risk assurance group spanning advisory, pen testing, compliance, and managed services. A broader incumbent competing with URM across multiple compliance and assurance lines.
• BSI (British Standards Institution): UK certification body and standards consultancy; URM's partner for ISO 27001/22301 certification, but also a broader incumbent in the same standards-based advisory and assurance market.
• KPMG UK (Cyber & Risk): Big 4 advisory practice with large UK cyber security, risk, and compliance consulting arm. Competes with URM for enterprise and mid-market ISO/SOC/cyber mandates, with a much broader portfolio.

Emerging players

• 6clicks: GRC and risk management SaaS provider with ISO 27001, risk, and compliance modules. Comparable in the Abriska-adjacent risk and audit management software category.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/urm-consulting-services
• Facebookfacebook.com/URMConsulting

Compliance21 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about URM Consulting Services