Applied IRAP assessment training from a trusted delivery partner since 2020
IRAP Assessor Training
Our IRAP Assessor Training is a hands-on, immersive program designed to build real-world IRAP assessment capability, not just theoretical knowledge.
Aligned to the Australian Signal Directorate’s (ASD) IRAP Common Assessment Framework, the course takes participants through a simulated Australian Government environment where they apply IRAP methodology end-to-end.
Upcoming Course Dates – New Program Pilot:
Monday 18 to Friday 22 May 2026 – In-Person, Canberra
Monday 25 to Friday 29 May 2026 – Virtual
Both courses are invitation-only, future program dates released soon
Special pilot program price: $5,830 + GST
The Australian Cyber Collaboration Centre (Aus3C) has been delivering IRAP Assessor training as a trusted delivery partner since 2020, working closely with government and industry to develop assessor capability aligned to evolving ASD expectations. Our course is delivered by highly experienced instructors with deep, hands-on IRAP assessment, governance and assurance backgrounds.
Participants scope systems, assess ISM and governance controls, gather and validate evidence, exercise professional judgement, and produce IRAP-style reporting artefacts – just as they would during a live IRAP engagement.
This course is designed for professionals preparing to pursue ASD endorsement as an IRAP Assessor, or supporting IRAP assessments across government and regulated environments.
Why train with us
Trusted IRAP training delivery partners since 2020
Instructors with deep, hands-on IRAP assessment and assurance experience
Training shaped by years of real IRAP engagements - not academic theory
Strong emphasis on professional judgement, assessor conduct, and ASD expectations
What to expect
Participants should expect a practical, assessment-driven experience grounded in real IRAP delivery experience.
Immersive Simulation Training
Scenario-based training in a simulated Australian Government environment
Practical learning
Blended delivery: expert-led sessions, hands-on labs, and facilitated workshops
Reinforcement & Assessment
Progressive reinforcement of IRAP concepts through practice and assessment
What you'll learn:
By completing this course, you’ll be able to:
- Apply IRAP methodology confidently across the full assessment lifecycle
- Scope systems accurately, including shared responsibility models
- Interpret ISM controls based on intent, implementation and effectiveness
- Plan and run effective control validation workshops
- Assess evidence and justify defensible control outcomes
- Produce clear, high-quality IRAP-style reports aligned to ASD standards
What the course covers
Governance & Assessor Responsibilities
IRAP governance, assessor obligations, professional conduct, and independence – reinforced through practical governance testing and conflict-of-interest activities
Practical Assessment Workshops
Facilitated workshops where participants practise stakeholder engagement, evidence validation, and professional assessment communication
Scoping & Threat Modelling
System boundary definition, scope management, and threat modelling to inform assessment planning and control coverage
Reporting & Assessment Artefacts
Development of IRAP-style findings and reports, with guided walkthroughs of ASD-aligned templates and reporting expectations
Control Assessment & Evidence Collection
Hands-on assessment of ISM governance and technical controls, including CCM development, control testing, and evaluation of intent versus implementation
Assessment & Validation
Capability assessed through practical activities, reporting artefacts, and a formal examination covering ISM interpretation and IRAP methodology.
Who this course is for?
This course is suited to experience cyber security and ICT professionals, including:
- Cyber security practitioners working with the Australian Government ISM
- ICT architects and engineers supporting government or regulated systems
- Risk, compliance and assurance professionals involved in IRAP or cloud assessments
- Security consultants and assessors building IRAP capability
- Practitioners preparing to apply for ASD IRAP endorsement
Participants are expected to have strong foundational cyber security knowledge. This course focuses on applied assessment execution – not introductory concepts.
