Skyhigh Security Penilaian IRAP pada Tingkat PROTECTED untuk Tahun 2026

Oleh Sarang Warudkar dan Stuart Bayliss -

May 21, 2026 5 Minute Read

As Australian government agencies and regulated enterprises accelerate cloud adoption, the need for independently assessed, government-endorsed cloud security has never been greater. We are pleased to announce that Skyhigh Security has successfully completed its Information Security Registered Assessors Program (IRAP) assessment at the PROTECTED security classification level for 2026.

This renewal confirms that the Skyhigh Security Service Edge (SSE) Portfolio continues to align the Australian Government’s stringent security requirements, providing public sector agencies and regulated enterprises with the assurance they need to handle sensitive and classified workloads in the cloud.

What is IRAP?

The Information Security Registered Assessors Program (IRAP) is a security compliance framework developed by the Australian Signals Directorate (ASD) and administered by the Australian Cyber Security Centre (ACSC). IRAP provides Australian Commonwealth government entities with a framework to:

• Assess the security controls of cloud service providers against the Australian Government Information Security Manual (ISM)
• Identify risks associated with adopting cloud services for sensitive and classified workloads
• Provide independent assurance that vendors have appropriate controls in place before being entrusted with government data

The PROTECTED classification level is one of the highest levels assessed under IRAP, covering information whose compromise could cause significant damage to national interests, organisations, or individuals. Cloud service providers assessed at PROTECTED level have demonstrated that their security controls are appropriate for handling the most sensitive categories of Australian government data.

Skyhigh Security’s IRAP Journey

Skyhigh Security’s IRAP credentials span several years, demonstrating sustained investment in Australian government compliance:

• 2020 —> Skyhigh CASB assessed at IRAP PROTECTED level
• 2023 —> Skyhigh SSE Platform assessed at IRAP PROTECTED level
• 2026 —> IRAP PROTECTED assessment renewed, covering the complete Skyhigh SSE Portfolio

Each cycle reinforces Skyhigh’s commitment not just to achieving compliance, but to maintaining it, ensuring that the controls we have in place continue to operate effectively as the threat landscape and regulatory requirements evolve.

What This Means for Australian Government Agencies

With the 2026 IRAP renewal, Australian government agencies and regulated enterprises can confidently deploy the full Skyhigh SSE Portfolio; including Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), Zero Trust Network Access (ZTNA), and Advanced Data Loss Prevention (DLP), knowing that:

• Security controls have been independently assessed against the Australian Government ISM at PROTECTED level
• The platform provides a single Data Loss Prevention (DLP) engine with centralised management, unified policy framework, and multi-layered security technologies suited to sensitive government environments
• Skyhigh SSE provides visibility and control of data in the cloud regardless of where it resides; in use, at rest, or in motion
• The platform supports sovereign data requirements and can be deployed in configurations meeting Australian data residency expectations

“Achieving IRAP PROTECTED classification across our unified SSE platform provides Australian government agencies with independently validated assurance to adopt advanced security capabilities. This includes Data Security Posture Management (DSPM) and AI security, enabling secure visibility, governance, and protection of sensitive data while supporting the adoption of AI technologies within regulated environments” – Karthik Viswanathan, VP & GM APJ, Skyhigh Security

The Significance of PROTECTED Level Assessment

Many cloud security vendors operate only at lower classification levels. Achieving and renewing an IRAP assessment at PROTECTED level places Skyhigh Security in an exclusive group of providers that have demonstrated the capability and controls to support Australia’s most sensitive government workloads.

For security and procurement teams, an IRAP PROTECTED assessment simplifies the vendor evaluation process; providing independent assurance that reduces assessment overhead and accelerates the path to secure cloud adoption for government agencies.

A Comprehensive Compliance Portfolio for the APJ Region

The IRAP 2026 renewal is part of Skyhigh Security’s broader commitment to help in supporting regulated industries across the Asia Pacific and Japan (APJ) region. Our portfolio aligns with key regulatory frameworks and supports organizations in their compliance efforts, including:

• IRAP PROTECTED (2026) —> Australian Government cloud security
• DPDPA —> India’s Data Protection and Digital Privacy Act
• ISO/IEC 27001 —> International information security management
• SOC 2 Type II —> AICPA Trust Services Criteria
• CSA STAR Level 1 —> Cloud Security Alliance global benchmark

For a full view of our certifications and compliance posture, visit the Skyhigh Security Trust Center: skyhighsecurity.com/about/certification.html

Tentang IRAP

The Information Security Registered Assessors Program (IRAP) is administered by the Australian Cyber Security Centre (ACSC) within the Australian Signals Directorate (ASD). IRAP endorses individuals from the private and public sectors to provide independent security assessment services, ensuring that cloud service providers meet the Australian Government’s security requirements before being entrusted with government data.

For more information about the IRAP framework, visit: cyber.gov.au/acsc/view-all-content/programs/irap

Skyhigh Security pengakuan dalam Gartner® Magic Quadrant™ 2025 untuk Security Service Edge SSE), yang diterbitkan pada 20 Mei 2025, yang mengevaluasi vendor berdasarkan Kemampuan Pelaksanaan dan Kelengkapan Visi mereka. Laporan ini, yang mengevaluasi para pemimpin industri berdasarkan Kemampuan Pelaksanaan dan Kelengkapan Visi mereka, menjadi bukti atas inovasi berkelanjutan dan kepemimpinan pasar kami. Dalam laporan pendamping Security Service Edge Gartner® Critical Capabilities Security Service Edge tahun 2025, Skyhigh Security skor tertinggi dalam Kasus Penggunaan Keamanan Data, yang sekali lagi menegaskan kepemimpinan kami selama bertahun-tahun dalam perlindungan data sebagai pembeda utama dari Portofolio SSE Skyhigh. Pengakuan ini mencerminkan investasi berkelanjutan kami dalam platform SSE terpadu yang mengutamakan data, yang dirancang khusus untuk industri yang sangat diatur, menggabungkan Secure Web Gateway SWG), Cloud Access Security Broker CASB), dan Zero Trust Network Access ZTNA) melalui satu konsol cloud-native, dengan Data Loss Prevention DLP) canggih sebagai intinya.

Informasi yang terkandung dalam dokumen ini mencerminkan pandangan dan pendapat Skyhigh Securitymengenai topik yang dibahas dan disediakan semata-mata untuk tujuan informasional. Tidak ada hal dalam dokumen ini yang merupakan atau harus ditafsirkan sebagai nasihat hukum. Pelanggan sepenuhnya bertanggung jawab untuk mengevaluasi kewajiban kepatuhan mereka sendiri sesuai dengan undang-undang dan peraturan yang berlaku. Penggunaan Skyhigh Security atau layanan Skyhigh Security tidak menjamin, memberikan jaminan, atau memastikan bahwa pelanggan akan mencapai atau mempertahankan kepatuhan terhadap persyaratan hukum atau peraturan lokal, nasional, atau internasional apa pun. Kami merekomendasikan untuk berkonsultasi dengan penasihat hukum yang berkualifikasi guna mendapatkan panduan yang spesifik sesuai dengan kebutuhan kepatuhan organisasi Anda.

Tentang Penulis

Stuart Bayliss

Direktur Manajemen Produk

Stuart telah berkecimpung di bidang manajemen produk selama lebih dari 20 tahun, menyediakan solusi keamanan berbasis cloud kelas dunia yang telah meraih berbagai penghargaan. Saat ini, Stuart memimpin tim Manajemen Skyhigh Security , di mana ia bertanggung jawab atas infrastruktur global yang mendukung platform keamanan cloud Secure Security Edge (SSE).

Sarang Warudkar

Manajer Pemasaran Teknis Senior

Sarang Warudkar adalah Manajer Pemasaran Produk berpengalaman dengan lebih dari 10 tahun di bidang keamanan siber, yang terampil dalam menyelaraskan inovasi teknis dengan kebutuhan pasar. Dia memiliki keahlian mendalam dalam solusi seperti CASB, DLP, dan deteksi ancaman berbasis AI, yang mendorong strategi masuk ke pasar dan keterlibatan pelanggan yang berdampak besar. Sarang memiliki gelar MBA dari IIM Bangalore dan gelar insinyur dari Universitas Pune, yang menggabungkan wawasan teknis dan strategis.