You can still use IAP when CRP is enabled. See AN10851 Using Code Read Protection in LPC1700 for details:
AN10851: CRP example with source code