From irap
Provides guidance on Australian IRAP assessments, ISM controls, Essential Eight maturity levels, ACSC guidelines, and data sovereignty for government cloud services.
How this skill is triggered — by the user, by Claude, or both
Slash command
/irap:irap-expertThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Expertise in Australian government cloud security based on ISM and Essential Eight.
Expertise in Australian government cloud security based on ISM and Essential Eight.
Authority: Australian Cyber Security Centre (ACSC) Base Standard: Information Security Manual (ISM) Key Framework: Essential Eight maturity model
Scope: Australian government agencies and contractors
| Level | Use Case | Residency |
|---|---|---|
| OFFICIAL | Routine business | No requirement |
| OFFICIAL:Sensitive | Personal info | Recommended AU |
| PROTECTED | Cabinet, national security | AU regions mandatory |
| SECRET | Intelligence | AU regions mandatory |
| TOP SECRET | Highest sensitivity | Dedicated infrastructure |
Maturity Levels:
Over 1,400 security controls organized by:
Region: ap-southeast-2 (Sydney) Requirement: PROTECTED data must stay in Australia
Process:
Assessors: ACSC-endorsed IRAP assessors
npx claudepluginhub grcengclub/claude-grc-engineering --plugin irapProvides expert guidance on ACSC Essential Eight cyber security mitigation strategies, including 8 strategies across 3 maturity levels, implementation, and Australian government requirements.
Provides expert guidance on Japanese ISMAP compliance including ISO 27001/27017/27018 controls, government cloud requirements, registration process, and Tokyo/Osaka data residency.
Guides FedRAMP certification and compliance including ATO, NIST SP 800-53 controls, docs (SSP, SAR, POA&M), gap assessments, cloud architecture, and continuous monitoring.