XRE is operating in accordance with IRAP-approved and compliant Microsoft solutions; Azure, Microsoft Dynamics 365 and Office 365.
IRAP provides the framework to endorse individuals from the private and public sectors to provide cyber security assessment services to the Australian government.
The IRAP assessment of Microsoft's services and cloud operations helps provide assurance to public sector customers in government and their partners that Microsoft has appropriate and effective security controls in place for the processing, storage, and transmission of data classified up to and including the level of PROTECTED. The IRAP assessments found that the Microsoft system architecture is based on sound security principles, and that the applicable Australian Government Information Security Manual (ISM) controls are in place and fully effective within our assessed services.