The assessment reflects the maturity of the security controls supporting Castlepoint's AI SaaS platform, as well as the company’s corporate network, and reinforces Castlepoint’s ongoing commitment to secure information management for government, national security, and other highly regulated organisations.

Castlepoint was assessed against more than 750 applicable controls in the current version of the Information Security Manual (ISM) maintained by the Australian Signals Directorate (ASD).  

What is IRAP?

The Australian Infosec Registered Assessors Program (IRAP) is administered by the Australian Cyber Security Centre (ACSC). Independent IRAP assessors evaluate systems against the Australian Government Information Security Manual (ISM), providing agencies with an independent assessment of security controls to support their own accreditation and risk decisions.

For organisations operating in high-assurance environments, an IRAP assessment provides independent validation that appropriate security controls have been assessed against Australian Government requirements.

Why does IRAP matter for customers?

Government agencies and many regulated industries manage information that requires strong security protections.

An IRAP assessment at the PROTECTED level demonstrates that Castlepoint's security controls have been independently assessed for environments managing information classified up to this classification. This helps organisations evaluating technology to understand and validate the maturity of the Castlepoint platform's security controls.

Why this matters for information management

Information management has become increasingly complex.

Organisations are responsible for managing growing volumes of records and information across collaboration platforms, cloud services, business applications, and legacy systems, while meeting increasingly complex governance and compliance obligations.

Castlepoint pioneered Explainable AI to automatically discover, classify and govern enterprise information. Unlike AI systems that provide limited visibility into how outcomes are reached, Explainable AI enables organisations to understand how information has been identified, classified and governed, supporting transparency, auditability and regulatory compliance.

For organisations managing sensitive information, security and explainability are complementary. Security helps protect information. Explainability helps organisations understand and demonstrate how information is being governed.

Supporting government and highly regulated organisations

The IRAP assessment follows Castlepoint's recent ISO 9001 and ISO 27001 triennial recertifications, reflecting the company's continued investment in secure information management and Explainable AI. Castlepoint is also certified under the UK Cyber Essentials scheme, JOSCAR UK and Australia, and global privacy frameworks.

Together, these independent assessments support organisations adopting technology that combines robust security controls with transparent, automated information governance, helping them manage information more effectively while maintaining compliance and reducing risk.

Castlepoint’s SaaS solution is trusted by Federal, State, and local governments, Defence, critical infrastructure, universities, financial institutions, and corporate clients across Australia, New Zealand, and the United Kingdom.

See the results of our AI SaaS solution here.