{"id":2305,"date":"2024-02-05T08:50:44","date_gmt":"2024-02-04T21:50:44","guid":{"rendered":"https:\/\/anchoram.webedge.com.au\/?post_type=industries&p=2305"},"modified":"2026-03-07T20:11:19","modified_gmt":"2026-03-07T09:11:19","slug":"irap-assessment","status":"publish","type":"industries","link":"https:\/\/staging.anchoramconsulting.com\/au\/?industries=defence\/irap-assessment","title":{"rendered":"IRAP Assessment"},"content":{"rendered":"

<\/lottie-player><\/div><\/div><\/div><\/div>\n

OVERVIEW<\/h2><\/div>

The Australian Signals Directorate (ASD) administer the Information Security Registered Assessors Program (IRAP) to ensure that entities can access high-quality ICT assessment services.<\/p>\n<\/div><\/div><\/div><\/div><\/div>

What’s New?<\/h2><\/div><\/div><\/div>

The Australian Government has stated their intention to adopt a \u2018whole-of-nation\u2019 approach to cyber resilience. This is great news as it means that any entity can now engage an IRAP Assessor \u2013 including industry!<\/p>\n

In 2020, ASD released an updated IRAP policy and training program with a view to increase the standard and consistency of cyber security advice provided by IRAP assessors. Anchoram Consulting offers IRAP assessment and advisory services under this new IRAP scheme.<\/p>\n

For the latest information on IRAP please refer to the\u00a0ASD IRAP Page<\/a>.<\/p>\n<\/div><\/div><\/div>

IRAP Assessment and Advisory Services<\/h2><\/div><\/div><\/div>

What is an IRAP Assessment?<\/h3><\/div>

An IRAP Assessment entails:<\/p>\n

    \n
  • gaining an understanding of system architecture of the system being assessed<\/li>\n
  • ensuring required physical security certifications have been attained<\/li>\n
  • ensuring that appropriate security controls are selected, implemented and operating effectively<\/li>\n
  • proposing mitigation strategies for any security controls that are not as effective as planned, and<\/li>\n
  • enabling the reviewer of the report to make an informed risk-based decision about the system\u2019s suitability for their security needs and risk appetite.<\/li>\n<\/ul>\n

    IRAP services include providing advice for and assessments of:<\/p>\n

      \n
    • Cloud services<\/li>\n
    • Gateways<\/li>\n
    • Information systems<\/li>\n
    • System documentation, and<\/li>\n
    • Risk mitigation activities.<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/div><\/div>

      Why Anchoram?<\/h2><\/div>

      We are a values-driven firm with deep experience in assisting entities with preparing for and undertaking IRAP assessments. Our associates have been conducting IRAP assessments for many years and are now also endorsed under the new scheme.<\/p>\n

      We of course adhere to strict independence and competence requirements in accordance with the ASD IRAP Policy, but more than that, we pride ourselves on doing business the\u00a0right<\/em>\u00a0way. This means that we will be there with you at every step, guiding you to meet your compliance and assurance goals with full transparency, great bang for buck, and minimal guff.<\/p>\n<\/div><\/div><\/div>

      Contact Us<\/h2><\/div>