Australia IRAP - Information Security Registered Assessors Program
IRAP Policy and Procedures: assessment-conduct duties – Australia IRAP - Information Security Registered Assessors Program

Australia IRAP - Information Security Registered Assessors Program PP-3.5.6(a)(iii): Accept no terms that block ASD quality assurance

What does PP-3.5.6(a)(iii) require?

An assessor must not agree to terms or non-disclosure agreements that would stop ASD obtaining copies of IRAP reports, the security controls matrix or other IRAP documentation for quality assurance (3.5.6(a)(iii), repeated at 4.3.5); customers must not force such agreements on assessors (IRAP Quality Assurance Framework).

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in IRAP Policy and Procedures: assessment-conduct duties – Australia IRAP - Information Security Registered Assessors Program

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.