Infosec Registered Assessors Program

The National Anti-Corruption Commission requires services for an Infosec Registered Assessors Program (IRAP renewal). The National Anti-Corruption Commission is seeking an IRAP assessor to conduct an IRAP renewal assessment for our Azure platform, Microsoft 365 and internet gateway.

In accordance with IRAP requirements, the IRAP assessment must be independent and objective; provide an overview of the security posture of the platform(s), including strengths, weaknesses and vulnerabilities stemming from control deficiencies; and provide recommendations to mitigate security weaknesses.

Each organisation will be able to submit one candidate.

Schedule 1 - Statement of Requirements

1. Conduct a thorough and independent high-quality assessment in accordance with the IRAP Common Assessment Framework.
2. Conduct an IRAP renewal on the Azure platform, Microsoft 365 services, and internet gateway services.
3. Provide an independent and objective view of the security posture of the system, including strengths, weaknesses, and vulnerabilities.
4. Present clear and actionable recommendations to mitigate identified security weaknesses.
5. Prepare a detailed IRAP Assessment Report and other affiliated documentation – as per IRAP requirements.