SecurityBrief New Zealand - Technology news for CISOs & cybersecurity decision-makers
Secure cloud compliance australia new zealand government data protection

AC3 achieves PROTECTED IRAP status for Managed Cloud platform

Fri, 24th Oct 2025

AC3 has announced the successful completion of an Information Security Registered Assessors Programme (IRAP) assessment to PROTECTED level for its Managed Cloud platform.

This new milestone follows closely on the heels of the company's Managed Security Operations Centre (SOC) achieving a PROTECTED-level IRAP assessment, underlining AC3's sustained commitment to meeting the security and compliance expectations of the Australian Government.

The accomplishment signals AC3's ongoing investment in delivering trusted, sovereign technology services across Australia and New Zealand. Demand for secure and compliant cloud solutions has continued to rise, particularly in the public sector and regulated industries. An IRAP-assessed Managed Cloud solution provides organisations with assurance that their data and workloads can be hosted in environments that meet government-endorsed standards.

AC3's Managed Cloud platform aligns with the Australian Signals Directorate (ASD) Information Security Manual (ISM), affirming that the service adheres to the same controls and procedures required by Government agencies to protect sensitive information. For organisations, this means access to a platform that not only supports scalability and flexibility but also addresses the complex compliance requirements often associated with procurement, auditing, and security protocols.

Commitment to compliance

AC3's Chief Executive Officer, Simon Xistouris, described the achievement as a further step in delivering on the company's vision for critical technology services in the region.

"It's another milestone for AC3 and its customers. Our vision is to be the go-to tech services provider for mission-critical environments in Australia and New Zealand, and this movement towards PROTECTED level compliance has been another step towards realising that vision."

James Mollison, Head of Hybrid Cloud at AC3, highlighted the regulatory challenges many organisations face and the importance of expert support in meeting them.

"Our PROTECTED Cloud platform was built from the ground up to meet the strict IRAP assessment criteria. We've seen the regulatory requirements for most industries becoming increasingly complex, and harder for many organisations to meet without expert assistance. With the launch of our PROTECTED Cloud platform, we're now able to offer our customers a pathway to sovereign operations, with a secure and compliant end-to-end service that helps them meet their strict regulatory requirements."

Technology partnership

The cloud platform has been developed on HPE infrastructure, designed specifically to comply with the Australian Government's ISM controls for PROTECTED environments. The partnership with HPE has been central to delivering these heightened levels of assurance and compliance.

Chris Weber, Vice President and Managing Director for HPE South Pacific, commented on the collaboration, stating:

"Our partnership with AC3 is built on a shared commitment to innovation, helping customers succeed, and trust. Together, we're advancing cloud security by combining deep expertise and cutting-edge technology to deliver a scalable, secure environment where organisations can operate with assurance and resilience."

Immediate availability

Both the newly IRAP-assessed Managed Cloud platform and the Managed SOC are available to AC3 customers across Australia and New Zealand.

The IRAP, developed by the Australian Government, provides information security assessment services for agencies and their partners, ensuring that designated assessors appraise technology environments against the requirements of the Australian Government Information Security Manual.

AC3's achievement reflects increased focus in both the public and private sectors on compliance and sovereign capabilities, particularly in the cloud services market for sensitive and regulated workloads.

Follow us on:
Follow us on LinkedIn Follow us on X
Share on:
Share on LinkedIn Share on X