IRAP Compliance and Capability Assessment Overview

This document is a technical report detailing the Information Security Registered Assessors Program (IRAP) and its significance for organizations providing information and communication technology (ICT) services to Australian government entities. The report outlines the purpose of IRAP, which is to assess the security of ICT systems and services, ensuring compliance with required security standards. It highlights that OrbusInfinity has been assessed at the PROTECTED level, the highest standard for cloud use in a commercial environment, with the assessment conducted between April and May 2023. The report specifies that Orbus Software met 96.4% of the in-scope controls during the assessment. Additionally, it discusses the importance of IRAP compliance for government contracts, emphasizing the need for vendors to demonstrate commitment to information security and adherence to industry best practices. The document also addresses the regulatory landscape and the importance of maintaining data integrity and confidentiality in government operations.