The Australian Cyber Security Centre (ACSC) publishes the Information Security Manual (ISM) and the Essential Eight maturity model. IRAP is the assessment regime for systems handling Australian Government data, with PROTECTED, SECRET and TOP SECRET classifications.
Australian federal and state government entities, defence industry, critical infrastructure operators under the SOCI Act, and any organisation processing Australian Government information.
Commonwealth and state government departments, defence primes and subcontractors, critical infrastructure operators (energy, water, telco, finance, transport, data centres), and managed service providers serving the Australian public sector.
Every Australian ISM, Essential Eight & IRAP requirement mapped to the Cloudgenics technical controls that satisfy it, with traceability.
Telemetry, configuration scans and audit logs streaming into a tamper-evident evidence store with retention aligned to the framework.
Standardised auditor walkthrough materials — diagrams, run-books and policy templates — that fast-track the assessment.