Compliance with AusPayNet annual assessment

Driving trust and resilience through AusPayNet annual security assessments.

Cybersecurity
Cybersecurity services
Cyber governance & compliance

The AusPayNet audit (IAC Annual Security Audit) is an annual independent review and formal sign-off against AusPayNet’s Annual Security Audit checklists by an AusPayNet Assessor to confirm compliance with the IAC Code Set security requirements for card payments.

Covering key compliance requirements

The audit validates the full spectrum of required IAC security measures, including PIN management, cryptographic practices, device handling controls, and secure terminal communication. It ensures both standard and non standard payment technologies comply with AusPayNet rules.
Driving security and business confidence

The audit demonstrates clear compliance with AusPayNet scheme requirements, reinforcing trust among stakeholders and partners that payment operations are secure, consistent, and well‑governed.
Reducing risk through robust security validation

By assessing encryption, key‑management, and PIN‑handling effectiveness, the audit helps identify weaknesses early and significantly reduces exposure to payment fraud and operational security risks.

AusPayNet IAC Annual Security Audit

The AusPayNet IAC Annual Security Audit is a mandatory yearly assessment that verifies an organisation’s compliance with key PIN security, cryptographic controls, and device management standards. It ensures the consistent application of audit procedures and security practices across all entities involved in processing PIN based transactions.

All IAC Participants including Acquirers and Issuers must complete the audit. Any third party providers involved in storing, processing, or transmitting payment or PIN data must also be included in the participants' assessment, ensuring end to end security across the entire payment ecosystem.

Thales brings deep AusPayNet/IAC audit experience and a proven, evidence-led approach to help you meet annual submission timelines, minimise findings, and produce clear, defensible audit artefacts (checklists, evidence mapping, and remediation plans). We also align AusPayNet requirements with relevant industry standards (e.g., PCI PIN/PCI DSS where applicable) to reduce duplication, ensure third-party coverage is addressed, and keep your payment environment audit-ready year-round. Thales Cyberservices Australia is also a registered PCI and Swift Assessor, thereby displaying deep and strong knowledge and experience.