Accreditation ready.
centrase helps Gold Coast healthcare practices and disability employment services providers meet AGPAL and RFFR accreditation requirements. IT controls, documentation and assessor readiness - built in from the start.
Discuss your accreditation needsAGPAL and RFFR accreditation
Two different frameworks, two different audiences. Both require specific IT controls, documented policies and assessor confidence.
Australian General Practice Accreditation
For general practices and primary healthcare facilities seeking RACGP accreditation. Assessors evaluate clinical governance, patient safety and data security.
- Patient data protection and access control
- Backup and disaster recovery testing
- IT security policies and procedures
- IT asset inventory and maintenance
- Incident response and reporting
Right Fit For Risk (DEWR)
For disability employment services (DES) and other DEWR-contracted providers. Mandatory accreditation to hold a government services contract.
- Essential Eight security controls
- Participant data protection
- Incident detection and response
- Compliance evidence collection
- Ongoing accreditation maintenance
Accreditation support - the process
Gap analysis
We assess your current IT environment against the accreditation framework. Identifies what's in place, what's missing and what needs improvement.
Implementation roadmap
A practical plan with phased implementation, dependencies and timeline. Priorities are realistic - assessor expectations, not gold-plating.
Delivery & evidence
We implement controls, prepare evidence and documentation assessors will expect, and ensure your team can explain how things work when they're asked.
After assessment: Accreditation frameworks don't stop after the assessment. They require ongoing evidence collection, control maintenance and periodic re-accreditation. We can help with that too.
What accreditation support includes
Accreditation gap analysis
Audit against AGPAL or RFFR requirements. Identifies compliance gaps, documentation gaps and control weaknesses.
IT controls implementation
Set up and configure the controls assessors expect: access management, encryption, monitoring, backup and recovery.
Policy & procedure documentation
Draft and tailor accreditation-ready policies for IT security, incident response, access control and data protection.
Evidence preparation
Gather and organize evidence for assessors: system configurations, logs, audit trails, test results and compliance records.
Assessor support
Prepare staff for assessment conversations. Explain how controls work. Assist with technical demonstrations during the assessment.
Ongoing compliance
Quarterly reviews to maintain compliance between assessments. Control status, documentation updates and continuous improvement.
Engagement and pricing
Accreditation work is typically scoped in two stages:
- Gap analysis engagement: We assess your environment against the accreditation framework and give you a prioritized roadmap with cost estimates. This usually takes 2–4 weeks and costs a fixed fee.
- Implementation engagement: We implement the identified controls, prepare documentation and evidence, and support the assessment process. Usually 3–6 months depending on scope.
Pricing depends on the framework (AGPAL vs RFFR), your starting point and how much change your organisation can absorb. We'll establish realistic expectations before you commit.
Request a gap analysisAccreditation - common questions
What is AGPAL and why does a general practice need it?
AGPAL (Australian General Practice Accreditation Limited) accredits general practices and primary healthcare facilities against RACGP (Royal Australian College of General Practitioners) standards. AGPAL accreditation is required for most practices to access government funding and demonstrates quality, safety and governance to patients.
The assessment covers clinical governance, patient safety, quality improvement and IT security. The IT environment is a significant component - patient data protection, confidentiality controls, backup and recovery, and documented security policies matter.
What is RFFR and who needs it?
RFFR (Right Fit For Risk) is the Department of Employment and Workplace Relations (DEWR) information security accreditation program. If your organisation delivers disability employment services (DES) or other services under a DEWR contract, RFFR accreditation is mandatory - you cannot hold a government contract without it.
RFFR assesses whether your organisation's security controls are appropriate for the sensitivity of government data and participant records you handle. It's based on Essential Eight controls plus evidence collection and incident response readiness.
What does centrase do to help with accreditation?
We help you meet the IT and security requirements that accreditation bodies expect. For AGPAL, we ensure patient data is protected, backups are tested, access is controlled and policies are documented. For RFFR, we implement the security controls DEWR requires, prepare evidence for assessment and maintain compliance over time.
We start with a gap analysis to understand what you have and what you're missing. Then we build a realistic implementation roadmap, implement controls, prepare evidence and help your team explain everything to assessors.
How long does accreditation preparation take?
A gap analysis takes 2–4 weeks. Implementation typically ranges from 3–6 months depending on what controls are missing and your capacity to change systems and processes. Plan for 6–12 months total if you're starting from scratch.
Some organisations are already close to accreditation-ready and need only documentation and polishing. Others need significant control implementation. We'll give you a realistic timeline after the gap analysis.
Can centrase help during the assessment itself?
Yes. We prepare documentation and evidence ahead of time so assessors can verify compliance efficiently. We can clarify technical details during the assessment and help with follow-up work if the assessors ask for additional documentation or clarification.
We also help your team prepare for assessment conversations - explaining how controls work and why you made the choices you did.
What happens after accreditation is granted?
Accreditation is not a one-time certificate. Both AGPAL and RFFR require ongoing compliance maintenance and periodic re-accreditation (usually every 3–4 years). You'll need to keep evidence current, maintain controls and be ready for follow-up audits.
centrase can help with quarterly compliance reviews, documentation updates and readiness for re-accreditation surveys.
Working toward accreditation?
A gap analysis tells you exactly where you stand and what needs to happen next. No surprises, no surprises.
Request a gap analysis