Verkada Completes IRAP Assessment for Data Classified up to PROTECTED in Australia
We’re proud to announce that the Verkada Command platform and supported physical security solutions have completed an InfoSec Registered Assessors Program (IRAP) assessment for data classified up to PROTECTED, conducted against applicable controls from the Australian Government Information Security Manual (ISM).
Based on publicly available information as of September 23, 2026, Verkada is the first cloud-managed physical security platform in Australia to complete an IRAP assessment for systems handling information classified up to PROTECTED.
The assessment reflects Verkada’s continued investment in Australia and our long-term commitment to supporting the Australian Government sector.
Government agencies should be able to modernise their physical security infrastructure without compromising on cyber security requirements. By completing an independent IRAP assessment, Verkada is giving government security, IT, risk, and procurement teams greater transparency into the controls underpinning our platform—and additional assurance as they evaluate a modern, cloud-managed approach.
“Completing the IRAP assessment demonstrates the seriousness of our investment in Australia and our commitment to building a durable business that can support government organisations over the long term,” said Steve Bray, Vice President, Australia and New Zealand at Verkada. “Australian Government agencies should not have to choose between rigorous cyber security and physical security technology that is simple to deploy, manage and scale. We’re excited to help agencies modernise with greater confidence.”
What is an IRAP assessment?
The InfoSec Registered Assessors Program is administered by the Australian Signals Directorate (ASD). Through the program, ASD-endorsed cyber security professionals provide independent security assessments of ICT systems, cloud services, and other technology environments.
IRAP assessors evaluate systems against relevant controls from the Australian Government Information Security Manual, helping organisations understand a system’s security posture, identify potential risks, and make informed decisions based on their own requirements and risk appetite.
Verkada’s assessment was conducted by ASD-endorsed IRAP assessors from Neon Cloud, Verkada’s independent assessment partner, in accordance with ASD’s Cloud Assessment and Authorisation framework and the June 2026 Australian Government Information Security Manual.
The assessment reviewed the implementation, appropriateness and effectiveness of security controls across Verkada’s assessed environment, including system design, technical configurations and operational practices.
An IRAP assessment is not a certification, accreditation or endorsement from ASD or the Australian Government. Instead, the independent assessment provides cloud consumers with information they can use in their own risk assessment and authorisation processes, including determining whether the assessed system is suitable to process, store or communicate sensitive or classified information.
Removing a barrier to modern physical security
Physical security systems increasingly operate as connected technology. Cameras, access control systems, sensors and visitor management tools may connect to organisational networks, store or process sensitive information and provide remote access to authorised users. As a result, cyber resilience has become an important part of the physical security conversation.
Verkada’s IRAP assessment gives eligible organisations access to independently evaluated information about the security controls within the assessed environment. This can help government teams:
Evaluate Verkada against relevant Australian Government security requirements
Understand how security responsibilities are shared between Verkada and the agency
Review the implementation and effectiveness of controls within the assessed environment
Support vendor security and procurement due diligence with independently assessed information
Make risk-based decisions based on their own requirements and risk appetite
Eligible organisations can request access to Verkada’s IRAP assessment report and supporting documentation through the Verkada Trust Center.
Supported physical security solutions
Through Verkada’s cloud-managed platform, Australian Government organisations can deploy supported product lines across core physical security workflows, including:
Video Security for centrally managing cameras and accessing live and historical footage
Access Control for managing doors, users, buildings and permissions
Alarms for detecting threats, verifying events and coordinating response
Intercom for communicating with and verifying visitors at entrances
Air Quality Sensors for monitoring indoor environmental conditions
Verkada Guest for visitor management
Together, these solutions help organisations modernise physical security operations in a unified, cloud-managed environment. Teams can centrally manage supported devices, users, and sites; remotely access live and historical footage; investigate incidents using AI-powered search and alerts; manage access permissions; and streamline visitor check-ins.
For video security deployments, Verkada’s hybrid cloud architecture combines onboard storage and processing with secure cloud-based management, helping reduce reliance on DVRs, NVRs, and other traditional recording infrastructure.
Modernising legacy physical security infrastructure
Many government environments still rely on fragmented, on-premise physical security systems deployed over many years.
Different locations may operate separate camera systems, access control platforms, and recording infrastructure. Teams may need to maintain DVRs, NVRs, servers, VPNs, and specialised software at individual sites, creating additional operational burden for already-constrained IT and security teams.
These disconnected systems can also make it harder to maintain consistent policies, investigate incidents quickly, and establish central visibility across a distributed estate.
A cloud-managed approach can help government organisations simplify infrastructure while gaining greater visibility across locations. For teams responsible for offices, courts, warehouses, transport facilities, utilities, public works sites, and remote locations, that can mean fewer systems to maintain, faster access to relevant information, and a more scalable foundation for physical security.
Security and trust at the foundation
IRAP builds on Verkada’s broader investment in security, privacy, and compliance.
Verkada’s platform is designed around Zero Trust principles, meaning users, devices, and networks must be authenticated and authorised rather than trusted by default. The platform supports safeguards such as:
Single sign-on and multi-factor authentication
Role-based access controls and least-privilege permissions
Encryption of data in transit and at rest
User and system audit logs
Time-bound customer authorisation for support access
Configurable retention and privacy controls
Automated security monitoring and vulnerability management
Verkada also maintains a security, privacy, and compliance program aligned with internationally recognised standards, including SOC 2 Type 2 and ISO 27001, ISO 27017, ISO 27018, and ISO 27701.
Customers own and control the data generated through their use of Verkada products. Administrators determine who can access their systems, how long footage is retained, and when Verkada support personnel may receive temporary access for troubleshooting.
Together, these practices are designed to give organisations greater visibility and control over their physical security systems and the data those systems generate.
Supporting critical infrastructure and regulated organisations
While IRAP plays an important role in Australian Government security assessments, its independent evaluation framework can also be relevant to critical infrastructure providers and other highly regulated organisations with stringent cyber security requirements.
Organisations across sectors such as energy, transport, healthcare, financial services, and telecommunications must also carefully evaluate the cyber security posture of connected technology.
For these organisations, Verkada’s IRAP assessment can provide additional transparency into the controls supporting the assessed environment and demonstrate our continued investment in meeting rigorous Australian cyber security expectations.
A continued commitment to Australia
The IRAP assessment reflects Verkada’s long-term commitment to the Australian market and our continued investment in supporting government and other security-sensitive organisations.
Verkada continues to invest in the infrastructure, security and regional capabilities needed to support Australian customers. Australia is available as a data storage and processing location for Verkada Command, giving organisations the option to store and process supported data in Australia to help meet regional performance, privacy and governance needs.
We’ll continue working closely with Australian Government agencies, critical infrastructure providers and trusted partners to understand their requirements and help modernise physical security responsibly.
As cyber threats, government requirements and customer needs evolve, Verkada will continue investing in the security, transparency, regional expertise and platform capabilities needed to meet them. Our focus is on delivering solutions that are secure, scalable and simple to operate—helping organisations protect people, facilities and essential services without adding unnecessary complexity.
To learn more about Verkada’s solutions for Australian Government organisations, reach out to [email protected] or contact +61 (0) 2-7259-9300.
