Skip to content
← Glossary

Entropy scoring & verification

IRAP (Information Security Registered Assessors Program)

An Australian government program, run by the Australian Signals Directorate’s Australian Cyber Security Centre, under which endorsed independent assessors evaluate a cloud service or system against the Australian Government Information Security Manual (ISM) and report the results. It is an assessment by a registered assessor rather than a certificate the government issues. It matters mainly to vendors selling to Australian government agencies, so Entropy counts it toward a vendor’s Governance score only when an admin has marked it as applicable to that vendor.

More: Why some certifications only apply to certain vendors

Source: Australian Cyber Security Centre (ACSC)