Udacity
Client
Online education
Sector
Framework
ISO 27001
Engagement
2020-2026
Udacity is an online education provider specialising in technology and professional development programmes.
Establishing and maintaining ISO 27001 compliance
THE CHALLENGE
OUR APPROACH
From ISMS implementation to ongoing support
Udacity required consultancy support to establish an Information Security Management System aligned with ISO 27001 requirements.
Beyond the initial implementation, the organisation needed an independent internal audit programme to regularly assess the effectiveness of its ISMS, identify areas requiring improvement and maintain confidence in its information security arrangements.
AKRUP initially supported Udacity with the development and implementation of its ISMS, including information security policies, risk management processes and governance arrangements.
Following implementation, our engagement continued through annual ISO 27001 internal audits, providing independent assessments of the management system and identifying opportunities for improvement.
This ongoing relationship has allowed AKRUP to develop a detailed understanding of Udacity's ISMS and support its continued alignment with ISO 27001 requirements.
OUR DELIVERY
Key areas of consultancy and audit support
ISMS development & policies
Supported the initial implementation of the ISMS, including the development of information security policies, procedures and governance arrangements.
Risk Management
Assisted with establishing risk assessment and treatment processes to identify, evaluate and manage information security risks.
Audit Preparation
Provided consultancy support during the initial implementation, helping Udacity prepare its ISMS and supporting documentation for external certification assessment.
Annual Internal Audits
Conducted independent annual internal audits to assess conformity with ISO 27001, evaluate ISMS effectiveness and identify areas for improvement.
1
2
Prepare for certification
Support certification readiness through documentation reviews, implementation guidance and the identification of outstanding requirements.
3
Annual Internal Audits
Independently assess the ISMS against ISO 27001 requirements and report findings to support ongoing compliance.
Continual Improvement
4
Identify opportunities to strengthen the ISMS and address changes in business operations, security risks and applicable requirements.
OUR ENGAGEMENT
Supporting ISO 27001 compliance since 2020
Establish the ISMS
Develop and implement the management system, including policies, risk management processes and information security controls.
THE OUTCOME
Six years of continued ISO 27001 support
Since 2020, AKRUP has supported Udacity through the initial implementation of its Information Security Management System and subsequent annual internal audits.
The engagement has provided Udacity with:
-
An established ISMS — Developed in alignment with ISO 27001 requirements.
-
Independent annual internal audits — Regular assessments of ISMS conformity and effectiveness.
-
Ongoing improvement — Audit findings and recommendations to support the continued development of information security arrangements.
The long-standing relationship reflects AKRUP's ability to support organisations beyond initial implementation, providing continuity and independent assurance as their information security requirements evolve.
LETS TALK
Start a conversation.
Complete the form and one of our consultants will contact you to discuss your requirements and next steps.