We are excited to share that Cisco AppDynamics has completed the Australian Government’s IRAP assessment at a “PROTECTED” level. AppDynamics, a Software-as-a-Service (SaaS) solution that provides observability across cloud-native technology landscapes, enables businesses with smart, adaptive tools to analyze and optimize digital business performance in real-time.

In an increasingly digital world, where data breaches and cyber threats loom large, protecting sensitive information has become a priority for individuals and organizations alike. The Australian Information Security Registered Assessors Program (IRAP) plays a critical role in enhancing digital security and ensuring the protection of valuable data. The IRAP is an Australian Signals Directorate (ASD) initiative that provides high-quality, Information and Communication Technology (ICT) security assessment services to Australia’s government and industry. The ASD endorses suitably qualified cybersecurity professionals to deliver services that secure systems and data for industry and the Australian Government. This key initiative provides assurance that Cloud Service Providers (CSP) meet the Australian Government’s cybersecurity standards.

Attaining the IRAP demonstrates Cisco’s commitment to the Australian public sector market as IRAP is of paramount importance, especially for businesses seeking to engage in projects and contracts with the Australian Government. The IRAP assessment assures government agencies and potential partners that IRAP-endorsed products and services adhere to stringent security protocols and operate within a robust cybersecurity framework. Consequently, achieving the IRAP assessment enhances an organization’s credibility, leading to increased opportunities and trust between clients and their stakeholders.

The IRAP assessment, completed by an independent ASD-certified IRAP assessor, is based on the Protective Security Policy Framework, Information Security Manual, and other Australian Government cybersecurity requirements, such as the Secure Cloud Strategy. The IRAP Policy and Procedures provide more detail about the IRAP program and assessment.

A Consolidated Audit Strategy Utilizing the Cisco Cloud Controls Framework (CCF)

The Cisco Cloud Controls Framework (CCF) has been central to Cisco’s ability to swiftly scale, comply with, and adopt regional and international compliance requirements as it ensures our cloud offerings have security and compliance built in throughout the software development life cycle. All features are designed from the outset with security and compliance controls built in. The CCF addresses a thorough list of data security governance requirements from around the world, using a test-once-use-many approach to achieve multiple regional and international security certifications. AppDynamics was able to leverage many common processes, procedures, and technical controls to streamline its assessment to be faster and more seamless and inherit additional security controls due to the shared responsibility model with the CSP.

The AppDynamics IRAP Engagement Letter, now available on the Cisco Trust Portal, exemplifies Cisco’s commitment towards contributing to a safe and secure digital transformation and hybrid-work environment in Australia and globally.

Read more about this achievement in this corresponding blog post: Cisco completes Cisco AppDynamics and Cisco Secure Application IRAP assessment.

We’d love to hear what you think. Ask a Question, Comment Below, and Stay Connected with Cisco Secure on social!

Cisco Secure Social Channels



Prashant Vadlamudi

Head of Global Cloud Compliance

Security and Trust Organization