Australian IRAP & ISM assessment · scoping to certification
Every oak starts with an acorn.
Every assessment starts with evidence.
OakAttest takes an Australian IRAP or ISM assessment from scoping to defensible certification, with evidence chain of custody, role-aware access, and a full audit trail. One hosted platform for the ASD ISM, Essential Eight, NIST 800-53, SOC 2 and ISO 27001 — with Australian data residency.
Hosted by us · Invite-based access · Australian data residency · Append-only audit
One platform, three jobs
-
Every framework
Assess against the ISM, NIST 800-53, SOC 2 or ISO 27001, scoped the right way per engagement.
Frameworks → -
Built for MSPs
One instance, many MSPs, many isolated client tenants. Provision, invite, and drop in.
For MSPs → -
Collaboration
Internal threads with @mentions and notifications, plus watch engagements for changes.
Collaboration →
The whole lifecycle, in order
- 1ScopingBoundary, applicability, Statement of Applicability.
- 2EvidenceRequests, uploads, chain of custody.
- 3FieldworkInterviews, assessment notes, methods.
- 4FindingsSeverity, remediation, sign-off.
- 5CertificationSigned, defensible certification records.
A working assessment instrument
Calm, dense, built for repeated work. Click any screen to view it full size.
Bring every assessment into one place.
From a single IRAP engagement to a full MSP practice across frameworks.
Request access