-
What is the Information Security Registered Assessors Program (IRAP)?
IRAP is an Australian Government initiative managed by the Australian Signals Directorate (ASD) designed to help ensure that information and communications technology (ICT) systems meet the requirements of the Australian Government Information Security Manual (ISM).IRAP is an Australian Government initiative managed by the Australian Signals Directorate (ASD) designed to help ensure that information and communications technology (ICT) systems meet the requirements of the Australian Government Information Security Manual (ISM).
-
What is an IRAP assessment?
An IRAP assessment is a rigorous evaluation of an ICT system, service, or cloud environment (collectively, “System”) to determine the effectiveness of the System’s controls in accordance with the ISM guidelines.An IRAP assessment is a rigorous evaluation of an ICT system, service, or cloud environment (collectively, “System”) to determine the effectiveness of the System’s controls in accordance with the ISM guidelines.
-
What is the ISM?
Published by the Australian Cyber Security Centre (ACSC), the ISM is a cybersecurity framework that outlines security controls and guidelines for organizations to implement to protect their System from cybersecurity threats.Published by the Australian Cyber Security Centre (ACSC), the ISM is a cybersecurity framework that outlines security controls and guidelines for organizations to implement to protect their System from cybersecurity threats. The ACSC is Australia’s lead cybersecurity government agency and operates within the ASD.
-
Who conducts a IRAP assessment?
A cybersecurity professional that has been accredited by the ASD as an IRAP assessor.A cybersecurity professional that has been accredited by the ASD as an IRAP assessor.
-
Why do companies conduct an IRAP assessment?
Assessments are conducted for a variety of reasons, including, but not limited to, identifying security gaps, demonstrating that a System meets the requirements for handling Australian Government data, and providing independent verification of security controls and governance.Assessments are conducted for a variety of reasons, including, but not limited to, identifying security gaps, demonstrating that a System meets the requirements for handling Australian Government data, and providing independent verification of security controls and governance.
-
Has Proofpoint conducted a IRAP assessment?
Yes. In 2024 Proofpoint engaged an IRAP assessor to conduct an IRAP assessment of its Australia-hosted Email Protection solution.Yes. In 2024 Proofpoint engaged an IRAP assessor to conduct an IRAP assessment of its Australia-hosted Email Protection solution.
The assessor concluded that Proofpoint’s Email Protection solution meets the controls and security objectives to operate at the PROTECTED classification level.
-
What does it mean that Email Protection met the IRAP Protected classification level?
Meeting IRAP Protected classification level means that Email Protection has been assessed as capable of handling sensitive government information up to the Protected level.Meeting IRAP Protected classification level means that Email Protection has been assessed as capable of handling sensitive government information up to the Protected level. IRAP Protected is the highest security classification a company can obtain in a commercial environment that handles sensitive Australian Government data.
-
How does Proofpoint’s IRAP Protected classification benefit its customers?
Australian government agencies and their ICT providers are required to adhere to strict security and compliance standards, particularly with respect to handling sensitive data.Australian government agencies and their ICT providers are required to adhere to strict security and compliance standards, particularly with respect to handling sensitive data. An IRAP Protected level assessment verifies that the solution has been evaluated against the ISM. By meeting the IRAP Protected classification level status, organizations can have confidence that Email Protection maintains the security controls necessary to securely protect government systems and information.
-
Where can I find out more about IRAP?
For additional information regarding IRAP please see https://www.cyber.gov.au/irap.For additional information regarding IRAP please see https://www.cyber.gov.au/irap.
© 2025 Proofpoint. All rights reserved. The content on this site is intended for informational purposes only.
Last updated March 19, 2025.
