IRAP Assessment services

This Tender is invited by the Issuer. Overview The Administrative Review Tribunal is seeking an IRAP assessor to perform an assessment of an end-to-end system in alignment with the Australian Signals Directorate's Blueprint for Secure Cloud. Scope The scope includes: Performing an IRAP assessment of the end-to-end system in alignment with the ASD's Blueprint for Secure Cloud Providing advice on options to resolve any weakness or deficiency identified during the assessment Preparing an assessment package covering all components comprising the solution Inheriting controls where possible from suppliers or fourth party IRAP assessments Assessing configurations of common Tribunal services specific to the system System environment The system is implemented on a Microsoft cloud technology stack comprising Microsoft 365, Microsoft Power Platform (including Power Pages, Power Automate and Microsoft Dataverse), Microsoft Dynamics 365, Microsoft Entra ID, an enterprise data warehouse, and supporting Microsoft Azure services. It also includes integrations with existing commonly shared Tribunal systems (for example SharePoint Online for case-specific document storage and Cloudflare for edge security and CDN) and third-party services (for example ABR for ABN lookup and eWay for payments). Assessment boundaries A full assessment of common Tribunal services is not intended to be within the assessment scope Third-party services are not within the assessment scope, with assessment boundaries ending at the points of integration Existing Tribunal case management systems are not considered within the system security assessment boundary There are no on-premises components within the system security assessment boundary Instructions to Tenderers Please refer to the attached requirements for further details.