Tesserent Auditor Profile
Tesserent is Australia's largest publicly-listed cybersecurity company (ASX:TNT), now operating as a subsidiary of Thales. With over 400 employees across four major Australian cities, they provide enterprise-grade IRAP assessments, compliance audits, and managed security services to government and critical infrastructure organizations.
The firm's scale and depth of expertise make it a natural choice for large government departments and enterprises requiring complex, multi-framework compliance programs. Their acquisition by Thales has further strengthened their capability to serve defense and national security clients.
What Tesserent Does Well
- Largest Australian cybersecurity firm — Scale and resources to handle the most complex government and enterprise engagements.
- IRAP authority — Decades of IRAP assessment experience supporting dozens of government departments.
- End-to-end capability — From compliance assessments to managed security operations and incident response.
Engagement Process
- Initial scoping workshop to define assessment boundaries and applicable frameworks.
- Gap analysis and readiness assessment against target compliance standard.
- Remediation support with technical teams addressing identified gaps.
- Formal assessment and evidence collection by qualified assessors.
- Report delivery, certification support, and ongoing compliance monitoring.
Pricing Expectations
Tesserent's pricing reflects their position as an enterprise-grade provider. IRAP assessments typically start from AUD $50,000, ISO 27001 certifications from AUD $30,000, and SOC 2 engagements from AUD $40,000. Large-scale enterprise programs involving multiple frameworks or complex environments can exceed AUD $150,000.
Who Should Choose Tesserent
Organizations requiring the backing of Australia's largest cybersecurity firm should consider Tesserent, particularly government agencies needing IRAP assessments, critical infrastructure providers, and large enterprises seeking a single partner for compliance, security operations, and incident response across multiple frameworks.