cc3976fb7f
- Split competitive-analysis-2026-05.org → TOC + 9 competitor files in ideas/competitors/. Dropped date from filename. All competitor UUIDs generated, TOC keeps original UUID for backlink continuity. - Deleted passepartout-economics.org archive (replaced by 27-node KB). - Inlined 5 'See also' blocks into natural prose (compliance-index, first-mover-window, revenue-table, orders-of-magnitude-time, native-org-knowledge-base). - Linked 7 orphan compliance pages back to compliance index + finished truncated sentences. - Linked all 14 Agora requirement docs from topic-relevant pages (identity→lisp-machine-security, infrastructure→compute-marketplace, social-space→growth-strategy, exchange→agora-contracts, etc.). - Linked ai-industry-impact from investment-thesis, sufficiency-flip, verification-appliance, effects-growth-flywheel (up from 1 to 10+ pages). - Fixed CREATED timestamps to use git commit dates instead of today. - Made all links absolute from root (no port inheritance). - Removed stale agora/docs/ duplicate content.
25 lines
1.1 KiB
Org Mode
25 lines
1.1 KiB
Org Mode
:PROPERTIES:
|
|
:ID: 7f46764b-47b8-4892-a526-2c1b9ee6e6df
|
|
:ID: auto-irap
|
|
:CREATED: [2026-05-23 Sat]
|
|
:END:
|
|
#+title: IRAP (Infosec Registered Assessors Program — Australia)
|
|
#+filetags: :passepartout:compliance:framework:irap:
|
|
|
|
|
|
** IRAP (Infosec Registered Assessors Program)
|
|
|
|
Australian government's cloud security assessment program — analogous to
|
|
[[id:e6993701-3c67-49bf-82f3-06907572cbf3][FedRAMP]]. Cloud services used by Australian government agencies must have an
|
|
IRAP assessment. Managed by the Australian Cyber Security Centre (ACSC).
|
|
Assessment levels: Protected (highest), Secret (top secret), Unclassified DLM.
|
|
|
|
Who must comply: Cloud providers selling to Australian federal, state, and
|
|
local government agencies. Also critical infrastructure providers.
|
|
|
|
Why it matters: Like FedRAMP and [[id:085b76cc-4a65-4660-9c70-85aee10ca99e][ISMAP]], IRAP is a procurement gate. An IRAP
|
|
Protected-level assessment is expensive and takes 6-12 months. First-mover
|
|
advantage: the gate stack's deterministic audit trail can be the primary
|
|
evidence artifact, reducing assessment scope/cost.
|
|
|