The process typically involves pre-assessment preparation, assessment conduct, and report delivery, taking 4 to 20 weeks depending on system complexity. Deliverables include a comprehensive IRAP Security Assessment Report, a Statement of Compliance, and a roadmap for addressing identified gaps.