Compliance Services
Certification programs that finish on time, at cost and survive the audit.
What Compliance Services actually delivers.
Vectra runs full certification and assessment programs across IRAP, PCI DSS QSA, ISO 27001 and Essential Eight. We sit on both sides of the table - practitioners during uplift, assessors at certification - so the controls put in place actually meet the standard the assessor asks about.
We start with a gap assessment against the framework, agree a remediation sequence, then carry the program through control design, evidence collection and the final audit. Findings are tracked in a system both your team and the assessor can see - no surprises in the closing meeting.
The outcomes this engagement has to produce.
-
01
PCI DSS QSA
Australia's first PCI DSS QSA company - full QSA delivery from scoping and gap analysis through to ROC and AOC.
-
02
IRAP at PROTECTED
PROTECTED-certified IRAP assessors with cleared personnel, delivering against the IRAP Policy and ISM.
-
03
ISO 27001 end to end
Implementation, internal audit and certification support - with the same team across the lifecycle.
-
04
Essential Eight ML2 / ML3
Maturity uplift to ML2 and ML3 with evidence pipelines that hold up under ASD review.
Related products & services.
How Vectra delivers the work underneath Compliance Services - inside customer environments today.
IRAP Assessment
PROTECTED-certified assessors for Australian government and regulated entities.
PCI DSS Consulting & Compliance
Australia's first certified QSA Company. Twenty years of PCI DSS assessments, pen tests and v4.0 script monitoring for merchants, service providers and banks.
ISO 27001 Compliance & Audits
Implement, certify and maintain the international standard for information security management - end-to-end across the three-year cycle.
ASD Essential Eight
Reach Maturity Level 3 across the ACSC's eight prioritised mitigation strategies.
Other places this turns up on the site.
Security, engineered around you.
Talk to an engineer - not a call centre. Most Vectra conversations start with a 30-minute technical briefing and end with a written plan.