Qualys Cloud Platform achieves IRAP PROTECTED status

Qualys has announced that its Qualys Cloud Platform has been successfully evaluated at the 'PROTECTED' level by the Infosec Registered Assessors Program (IRAP), an initiative by the Australian Signals Directorate (ASD).

This IRAP assessment confirms that Qualys has met some of the highest security standards established by the Australian government for handling sensitive customer data.

This milestone is particularly significant for Australian Government agencies and commercial entities, including those in critical infrastructure sectors, which can now consider Qualys' platform with increased confidence with regard to its security posture and protection mechanisms.

Sam Salehi, Managing Director for Australia and New Zealand at Qualys, remarked, "Completing the PROTECTED IRAP assessment for our cloud platform is not just a technical milestone – it's a reflection of our ongoing investment in securing Australia's public and critical infrastructure sectors. It demonstrates our capability to meet over 1,200 stringent security controls, reinforcing our dedication to customer data protection amid a dynamic threat landscape."

"Completion of this assessment allows organisations to deploy our solution easily, helping them safeguard their most critical systems and better meet their compliance requirements."

The Qualys Cloud Platform's compliance with these stringent standards supports organisations aiming to align with the Australian Cyber Security Centre's Essential Eight strategies and the Australian Government's Protective Security Policy Framework (PSPF) requirements.

In addition to this achievement, Qualys has introduced its Risk Operations Center (ROC) with Enterprise TruRisk Management.

This development seeks to redefine cyber risk operations by integrating various security solutions to enhance prioritisation and actionable remediation efforts. The Qualys ROC supports security teams by enabling them to measure, communicate, and eliminate cyber risk through targeted remediation actions, which are designed to improve business outcomes.