How do I install the Irap Expert skill?

Run npx skillmds@latest add aibot88/irap-expert in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Irap Expert safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Irap Expert?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Irap Expert free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Irap Expert?

aibot88 (@aibot88) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Irap Expert by aibot88 — Agent Skill

Name: Irap Expert
Rating: 4.2 (5 reviews)
Author: aibot88

File contents

IRAP Expert

Expertise in Australian government cloud security based on ISM and Essential Eight.

Expertise Areas

IRAP Overview

Authority: Australian Cyber Security Centre (ACSC) Base Standard: Information Security Manual (ISM) Key Framework: Essential Eight maturity model

Scope: Australian government agencies and contractors

Classification Levels

Level	Use Case	Residency
OFFICIAL	Routine business	No requirement
OFFICIAL:Sensitive	Personal info	Recommended AU
PROTECTED	Cabinet, national security	AU regions mandatory
SECRET	Intelligence	AU regions mandatory
TOP SECRET	Highest sensitivity	Dedicated infrastructure

Essential Eight (8 Strategies, 3 Maturity Levels)

Application Control: Whitelist approved applications
Patch Applications: 48-hour critical patching
Configure Office Macros: Block internet macros
User Application Hardening: Disable Flash, ads, Java
Restrict Admin Privileges: Separate admin accounts
Patch Operating Systems: 48-hour critical OS patching
Multi-Factor Authentication: MFA for all
Regular Backups: Daily backups, offline storage

Maturity Levels:

Level 1: Partly aligned (some mitigation)
Level 2: Mostly aligned (good protection)
Level 3: Fully aligned (excellent protection)

ISM Controls

Over 1,400 security controls organized by:

Governance
Physical security
Personnel security
ICT security

Australian Data Residency

Region: ap-southeast-2 (Sydney) Requirement: PROTECTED data must stay in Australia

IRAP Assessment

Process:

IRAP assessor engagement
ISM control assessment
Essential Eight maturity assessment
Security documentation review
Assessment report generation

Assessors: ACSC-endorsed IRAP assessors

Capabilities

ISM control selection and implementation guidance
Essential Eight maturity assessment (Level 1/2/3)
Australian government classification determination (OFFICIAL/PROTECTED/SECRET)
IRAP assessment preparation and documentation
Australian data sovereignty verification (Sydney region)
48-hour critical patching workflows
ACSC guidelines interpretation and implementation
Multi-factor authentication strategies for government systems

---name: irap-expertdescription: Australian IRAP (Information Security Registered Assessors Program) expert. Provides guidance on ISM controls, Essential Eight maturity levels, ACSC guidelines, and Australian data sovereignty requirements.---# IRAP ExpertExpertise in Australian government cloud security based on ISM and Essential Eight.## Expertise Areas### IRAP Overview**Authority**: Australian Cyber Security Centre (ACSC)**Base Standard**: Information Security Manual (ISM)**Key Framework**: Essential Eight maturity model**Scope**: Australian government agencies and contractors### Classification Levels| Level | Use Case | Residency ||-------|----------|-----------|| **OFFICIAL** | Routine business | No requirement || **OFFICIAL:Sensitive** | Personal info | Recommended AU || **PROTECTED** | Cabinet, national security | AU regions mandatory || **SECRET** | Intelligence | AU regions mandatory || **TOP SECRET** | Highest sensitivity | Dedicated infrastructure |### Essential Eight (8 Strategies, 3 Maturity Levels)1. **Application Control**: Whitelist approved applications2. **Patch Applications**: 48-hour critical patching3. **Configure Office Macros**: Block internet macros4. **User Application Hardening**: Disable Flash, ads, Java5. **Restrict Admin Privileges**: Separate admin accounts6. **Patch Operating Systems**: 48-hour critical OS patching7. **Multi-Factor Authentication**: MFA for all8. **Regular Backups**: Daily backups, offline storage**Maturity Levels**:- Level 1: Partly aligned (some mitigation)- Level 2: Mostly aligned (good protection)- Level 3: Fully aligned (excellent protection)### ISM ControlsOver 1,400 security controls organized by:- Governance- Physical security- Personnel security- ICT security### Australian Data Residency**Region**: ap-southeast-2 (Sydney)**Requirement**: PROTECTED data must stay in Australia### IRAP Assessment**Process**:1. IRAP assessor engagement2. ISM control assessment3. Essential Eight maturity assessment4. Security documentation review5. Assessment report generation**Assessors**: ACSC-endorsed IRAP assessors## Capabilities- ISM control selection and implementation guidance- Essential Eight maturity assessment (Level 1/2/3)- Australian government classification determination (OFFICIAL/PROTECTED/SECRET)- IRAP assessment preparation and documentation- Australian data sovereignty verification (Sydney region)- 48-hour critical patching workflows- ACSC guidelines interpretation and implementation- Multi-factor authentication strategies for government systems

Frequently asked questions

Irap Expert