IRAP Services

An IRAP Assessment entails:

• Gaining an understanding of system architecture of the system being assessed
• Ensuring required physical security certifications have been attained
• Ensuring that appropriate security controls are selected, implemented and operating effectively
• Proposing mitigation strategies for any security controls that are not as effective as planned, and
• Enabling the reviewer of the report to make an informed risk-based decision about the system’s suitability for their security needs and risk appetite.

IRAP services include providing advice for and assessments of:

• Cloud services
• Gateways
• Information systems
• System documentation, and
• Risk mitigation activities.

 We are a values-driven firm with deep experience in assisting entities with preparing for and undertaking IRAP assessments. Our associates have been conducting IRAP assessments for many years and are now also endorsed under the new scheme.

We of course adhere to strict independence and competence requirements in accordance with the ASD IRAP Policy, but more than that, we pride ourselves on doing business the right way. This means that we will be there with you at every step, guiding you to meet your compliance and assurance goals with full transparency, great bang for buck, and minimal guff.