Elastic completes IRAP certification for Elastic Cloud

Elastic, known for its search AI capabilities, has successfully completed the Infosec Registered Assessors Program (IRAP) assessment at the Protected level for Elastic Cloud.

By achieving this certification, Elastic ensures that the Australian Government and its agencies can verify that their cloud service providers and internal systems comply with the security requirements specified in the Australian Government Information Security Manual (ISM). This manual is part of the standards outlined by the Australian Cyber Security Centre (ACSC).

"With cybersecurity threats evolving daily, we recognise that robust security is not just a feature - it's a responsibility," said Anna Mascarello, Regional Vice President of Public Sector, Australia and New Zealand at Elastic.

"Achieving IRAP assessment at the Protected level means our Search AI platform can securely manage sensitive information, including data critical to government agencies, underscoring Elastic's commitment to safeguarding critical infrastructure and delivering secure technology solutions to the Public Sector."

"As Elastic continues delivering secure, reliable, and compliant Search, Security and Observability solutions, the added flexibility of IRAP will enable Australian government agencies to scale their operations as needed."

The IRAP framework provides Elastic's clients with the ability to select solutions specifically tailored to their business requirements, ensuring that their digital operations are both flexible and compliant.

Attaining IRAP certification allows Australian Governments and their agencies who use Elastic Cloud to benefit in several ways:

• Enhanced Security Assurance: IRAP signifies that Elastic Cloud has been rigorously assessed by qualified experts, ensuring compliance with stringent security controls.
• Support for Government Workloads: The platform has now been validated to support workloads at the Protected level, which facilitates further collaboration with government entities.
• Ongoing Commitment: IRAP compliance is maintained through continuous monitoring and updates in line with evolving security standards.

Beyond IRAP certification, Elastic adheres to several other significant information security standards and global regulations.

Its services undergo independent audits, verifying compliance with various privacy and standards such as CSA STAR, ISO/IEC 27017, SOC 3, and UK Cyber Essentials Plus. Elastic's focus on transparency and security is further reflected in its Trust Centre, which provides detailed information on security, compliance, privacy, and resilience for both Elastic and the Elastic Cloud.