The Infosec Registered Assessors Program (IRAP) is an Australian Signals Directorate (ASD) program administered by the Australian Cyber Security Centre (ACSC) to help government agencies verify that appropriate controls are in place for addressing information and communications technology (ICT) security requirements. The IRAP framework is based on the requirements of the Australian Government Information Security Manual (ISM) and provides a process by which a technology provider can demonstrate its compliance with the ISM.

IRAP assessments are required for cloud services procured by Australian federal, state, and local government agencies. As part of the updated IRAP Policy (2020), Cloud Service Providers (CSPs) are required to complete a baseline assessment using an independent third-party certified assessor that covers the CSP fundamentals and service-specific controls.