Pre-Assessment: The first stage of the IRAP assessment process is the pre-assessment. At this stage, the provider and the assessor agree on the scope of the assessment, and the provider is asked to provide information on the systems and processes that will be assessed.

On-site Assessment: The second stage of the assessment process is the on-site assessment. During this stage, the assessor visits the provider's premises to evaluate the security measures and processes in place. The assessor will interview staff, observe activities, and review documents and systems.

Report Preparation: The third stage of the assessment process is the report preparation. During this stage, the assessor will analyze the data collected during the on-site assessment and prepare a report outlining the findings and recommendations.