ISM-aligned. IRAP pathway ready.
State and Commonwealth agencies are bound by the Information Security Manual and the Protective Security Policy Framework, and are accountable for how OFFICIAL and PROTECTED information is classified, stored, and disclosed. Public frontier AI models are not approved under the ISM for official information. BlackVault™ deploys within your controlled environment and aligns to the controls your accreditor enforces.
Your regulation, named.
Information Security Manual
Commonwealth and state agencies are bound by the ISM and the PSPF. BlackVault™ deploys within your controlled environment, aligns to ISM controls, and produces the System Security Plan and control evidence bundle your accreditation requires.
Assessment pathway
When an engagement handles PROTECTED information, an IRAP assessment is the path to authorisation. BlackVault™ supports the IRAP assessment engagement with the documentation and architecture evidence an assessor expects.
Maturity uplift
The Essential Eight is the baseline every agency is measured against. BlackVault™ implements the controls and includes the maturity-level uplift path in scope — assessed, not assumed.
Obligations relieved, not products sold.
Begin with an assessment, not a procurement.
You do not need to commit to infrastructure to engage BlackVault™. A fixed-scope AI Readiness Assessment maps where your agency is already exposed to public AI tools, identifies the workflows with the highest compliance and productivity return, and sets out a sovereign roadmap against your obligations. Sovereign deployment follows when the agency is ready.