In August 2026, Airlock Digital was evaluated as part of the Information Security Registered Assessors Program (IRAP) at the PROTECTED level. This assessment provides assurance that Airlock Digital security controls including our cloud-based application control solution, align with the Australian Government Information Security Manual (ISM) and Protective Security Policy Framework (PSPF).
IRAP FAQs
The Infosec Registered Assessors Program (IRAP) is an initiative by the Australian Signals Directorate (ASD) to provide independent and standardised security assessments of information technology (IT) systems to ensure alignment with the Australian GovernmentInformation System Manual(ISM) standards and theProtective Security Policy Framework(PSPF).
An IRAP assessment is not an accreditation, certification, endorsement, or Authority to Operate from the Australian Signals Directorate (ASD), the ACSC, or the Australian Government. Each organisation should make its own assessment based on its environment, requirements, and risk appetite.
Under the IRAP, the Australian Signals Directorate (ASD) endorses suitably qualified cyber security professionals to provide independent cyber security assessment services.
IRAP assessments can only be conducted by ASD-endorsed IRAP assessors. For an organization like Airlock Digital, IRAP assessments are a critical factor in demonstrating how we meet Australian Government security mandates. A successful IRAP assessment is the result of a rigorous security review and designed to help organizations determine whether it is suitable for use in their operations provided to the Australian Government.
Airlock Digital has undergone an IRAP assessment at the PROTECTED classification level. The intent was to demonstrate how our company effectively implements security controls to meet this classification level.
The PROTECTED level is for high business impact systems where unauthorised access could cause signficiant damage to government operations, organisations or individuals. It requires a combination of robust technical (e.g. approved encryption, secure administration and adherence to the Essential Eight maturity framework) and governance controls (policies, plans, procedures).
The current Airlock Digital IRAP assessment will be good for 24 months and will be assessed every two years by an independent ACSC-qualified assessor. An updated report will be available after the assessment is completed.
The IRAP Letter of Attestation and other related artefacts can be accessed from the Airlock Digital Trust Center (note: NDA required).
For the latest and most accurate information on Airlock Digital security, please visit our Trust Center at https://security.airlockdigital.com/.
Airlock Digital is proud to work with many Federal, State, local and civilian agencies. Please find more information:
