Webinar Description
Key Takeaways
- Explains the critical difference between inherited cloud host IRAP assessments and application-level assessments for SaaS platforms
- Addresses PROTECTED-level compliance requirements for Australian government procurement
- Covers multi-framework certification strategies spanning IRAP, FedRAMP, SOC 2, ISO 27001/42001 and CMMC
- Designed for CISOs, compliance managers and SaaS vendors pursuing government contracts
The IRAP Assessment Gap
Many SaaS vendors claim IRAP compliance based solely on their cloud hosting provider’s assessment, a practice that does not address the security of the vendor’s own application and environment. This webinar, hosted by Kiteworks and A-LIGN, examines what constitutes a valid, independent IRAP assessment at the application level and why this distinction matters for organisations responding to Australian government tenders.
The session addresses how to identify whether a platform has undergone genuine application-level assessment or merely relies on infrastructure certification. Even when using an assessed platform, organisations may still require independent evidence of compliance for their own implementation.
Regulatory and Framework Context
The webinar covers recent changes to the Hosting Certification Framework and updates to the Information Security Manual (ISM). It also explores how organisations can consolidate evidence across multiple compliance frameworks, including IRAP, FedRAMP, SOC 2, ISO 27001/17/18/42001 and CMMC, using a single assessment partner and evidence set. This approach aims to reduce the complexity and cost of managing overlapping certification requirements.
Who Should Attend
This 45-minute webinar is suited to IT security leaders, compliance managers, risk officers and procurement managers in government and regulated industries. SaaS vendors and cloud service providers targeting Australian government contracts at the PROTECTED level will find practical guidance on assessment processes, system boundaries and reassessment timelines.