Compliance

ASD (IRAP)


Virtustream is committed to protecting Australian government data from risk when our customers procure Virtustream cloud services. Virtustream is an Australian Signals Directorate (ASD) certified cloud service provider (CSP). The Virtustream certification is unique among cloud service providers because it extends beyond cloud infrastructure to include database, operating system, and application services as well as on-premises deployments. Additionally, Virtustream ASD-accredited cloud and managed services apply to commercial customers as well, providing our enterprise customers with the same assurances that it does for Australian federal government agencies.

Virtustream cloud services provide complete security isolation of our customers’ workloads, making it ideal for highly regulated environments, such as government and healthcare. The Virtustream ASD-accredited cloud for the Information Security Registered Assessors Program (IRAP) provides customers tangible security assurance and visibility of their workloads through the incorporation of security controls such as application whitelisting, by default. Additionally, Virtustream SAP HEC managed services meet the strictest ASD requirements for Australian federal government agencies and commercial organizations without the cost to customers usually associated with complying with these strict security standards.

This certification is conducted and renewed on a continuous basis.

Virtustream cloud services certified under ASD IRAP include: 

  • Virtustream Enterprise Cloud
  • Virtustream Healthcare Cloud
  • Virtustream Storage Cloud
  • Virtustream xStream Cloud Management Platform
  • Virtustream SAP HEC

Region: Australia

About ASD Cloud Certification

Australian Signals Directorate (ASD) certification of cloud services includes confirmation about physical, personnel, and information security requirements, as detailed in the Protective Security Policy Framework (PSPF) and Information Security Manual (ISM), including on-site inspections. It is not merely a compliance exercise. ASD certification goes beyond checklists and focuses on negotiating solutions. ASD certification in some cases may never be achieved if the service cannot meet the minimum required standards for protecting government information.