Frequently Asked Questions

To be eligible for ASD endorsement as an IRAP assessor, you must hold one certification from Category A and one from Category B:

• Category A (security management): CISSP, CISM, or GSLC
• Category B (audit / assessment): CISA, PCI QSA, or CRISC

You do need to hold both certifications at the time of enrolment, and you will need them in order to apply for ASD endorsement after passing the course.

ASD requires a minimum of five years of information security experience, with demonstrated work implementing or assessing security controls aligned to the ISM and/or the PSPF.

This experience should include practical familiarity with Australian Government security frameworks — not just general IT security.

Yes. You must be an Australian citizen to be endorsed as an IRAP assessor by ASD. This is a non-negotiable requirement set by the Australian Signals Directorate.

A Negative Vetting Level 1 (NV1) clearance is required to be endorsed as an IRAP assessor. You do not need it at the time of enrolment, but you will need it before ASD will grant endorsement.

ASD may sponsor clearance processing for successful course graduates who do not yet hold an NV1.

Under the IRAP 2.0 framework, existing IRAP assessors are required to complete the updated training course as part of their membership renewal. A reduced rate applies for current assessors — see the course schedule for pricing.

There are three assessed components:

1. IRAP Examination — a formal knowledge assessment conducted on the final day of the course week
2. IRAP Report Assessment — a condensed IRAP-style assessment report using a modified ASD template, based on your lab work during the course. You have approximately one week after the course to finalise it.
3. Daily Reflections — short reflective entries completed during and after the course week

The IRAP examination is:

• 3 hours in duration
• Open book — you may reference any materials
• A mix of multiple-choice and short-answer questions
• Negative marking applies to multi-select questions where too many options are selected (over-selection)
• Large Language Models (LLMs) are permitted during the exam

The pass mark for the IRAP examination is 80%.

To pass the course overall, you must achieve 80% on the exam and satisfactorily complete the IRAP report assessment and daily reflections.

If you score between 75% and 79.9% on the exam and have passed all other components, you are eligible for a supplementary exam.

• The supplementary exam has the same 80% pass mark
• It must be attempted within 3 months of your original exam
• Only one supplementary attempt is available

If you score below 75%, or fail the supplementary exam, you must wait at least 6 months before re-enrolling in the course. There is no further re-sit option for that intake — you would need to complete the full course again.

Results are provided within 30 business days of the final assessment submission. Once issued, your results are valid for 3 months to apply for ASD endorsement.

No. Passing the IRAP training course is one step in the endorsement process. ASD endorsement is a separate decision made by the Australian Signals Directorate and involves additional requirements including:

• Holding the required Category A and Category B certifications
• A minimum Negative Vetting Level 1 (NV1) security clearance
• Submitting the IRAP Application, Assessor Agreement, Confidentiality Deed, and ACSC Partner Portal Deed
• Meeting ASD's character, experience, and independence requirements

You must apply to ASD for endorsement within 3 months of receiving your results. If you do not apply within this window, you may need to re-sit the examination or retake the course.

IRAP membership operates on a 24-month renewal cycle. There are multiple pathways available for renewal, which may include re-completing the training course, demonstrating continued professional development, or meeting other ASD-specified requirements.

AusISA offers both in-person and live-virtual (online) delivery options. Check the course schedule for current offerings and formats.

In-person courses include catering and are held in Canberra, with other capital cities available on demand.

Pricing for the IRAP 2.0 course is:

• New IRAP Assessors: $7,620 AUD + GST
• Current IRAP Assessors: $3,950 AUD + GST

Group and agency discounts are available for bookings of 5 or more participants. Contact courses@australianinformationsecurity.academy for volume pricing.

We accept credit card (instant confirmation) and invoice (your spot is confirmed once the invoice is paid). Both options are available at checkout.

The course is delivered exclusively by active practitioners — ASD-endorsed IRAP assessors and experienced operators with deep experience across Defence, Intelligence, and Critical Infrastructure. See our facilitators page for the full team.