Re-accreditation overview

What is RFFR re-accreditation?

RFFR re-accreditation is the process of continuing acceptance of a Provider’s or a Third-Party Employment and Skills (TPES) system Vendor’s Information Security Management System (ISMS). Re-accreditation must be completed by the third anniversary of the initial RFFR accreditation date.

Re-accreditation ensures that the ISMS continues to meet the security requirements and standards in accordance with the RFFR accreditation approach.

Who is subject to the re-accreditation process?

All current Providers and TPES system Vendors who have completed the initial accreditation and subsequent accreditation maintenance requirements.

RFFR re-accreditation process and timeframes

The re-accreditation process commences after approval of a Providers second accreditation maintenance submission. The department will engage with Providers at the commencement of their re-accreditation process to ensure their provider category is still appropriate.

The submission of documents for re-accreditation must occur 6 weeks before the anniversary date. This allows time for the department to seek any further information if necessary and provide time for the Accreditation Authority to review and approve a Providers submission.

The date of re-accreditation becomes the new accreditation anniversary date for the Provider and TPES vendor. This means the next accreditation maintenance must be completed within 12 months of this date. Below is an example timeline of a RFFR accreditation and re-accreditation.

In the example above, the re-accreditation date of 28 August 2026 becomes the new accreditation anniversary date. This date will apply to the future accreditation maintenance requirements.

If you are unaware of your current RFFR accreditation anniversary date, please reach out to our team securitycompliancesupport@dewr.gov.au.

Documents required for re-accreditation