LastPass completes IRAP assessment

Password manager provider LastPass has completed an Information Security Registered Assessors’ Program (IRAP) assessment, demonstrating the platform’s suitability for managing government data at the PROTECTED classification level.

The assessment under the Australian Cyber Security Centre program evaluates ICT solutions against the security controls within the federal government’s Information Security Manual.

Completing the assessment will enable LastPass to provide its solutions to government agencies and critical infrastructure operators. LastPass also aims to use the assessment to expand into regulated Australian sectors such as health care and financial services.

LastPass CISO Mario Platt said completing the assessment has sharpened the company’s visibility and governance posture across systems.

“This reinforces our ability to meet evolving regulatory requirements while reassuring organisations and individuals that our security approach is both proactive and globally aligned,” he said.

Platt said completing the assessment will serve the company well, as government agencies and enterprises grapple with the heightened security requirements under regulations and legislation such as the soon-to-be-updated Security of Critical Infrastructure Act.

LastPass has been investing globally in security, transparency and compliance. As part of this push, the company recently introduced Secure Access Experiences, which include SaaS monitoring and protection capabilities.

Image credit: iStock.com/Iaremenko