# PCI Consulting Australia

> PCI Consulting Australia is an Australian specialist in compliance and consultancy, helping businesses achieve and maintain PCI compliance through PCI DSS assessments, advisory services, penetration testing, payment page protection support, ISO 27001 consulting, and broader security assessments.

## Business overview
PCI Consulting Australia is a specialist firm focused on helping organisations meet Payment Card Industry Data Security Standard (PCI DSS) requirements. The business has been assisting clients with PCI compliance since 2014 and positions itself as a pragmatic, experienced specialist in compliance and consultancy focused on security, compliance, and practical delivery.

PCI Consulting Australia works with businesses that handle payment card data and need expert support to reduce PCI scope, improve security posture, prepare for assessment, meet compliance obligations, and maintain compliance over time.

## Core services

### PCI DSS assessments and advisory
PCI Consulting Australia provides:
- PCI DSS assessments
- PCI DSS compliance advisory
- Gap assessments
- Scope reduction guidance
- Practical remediation advice
- Ongoing support across PCI compliance programs

### Penetration testing
PCI Consulting Australia provides penetration testing services aligned with PCI DSS v4.0.1 requirements, including:
- Internal network penetration testing
- External network penetration testing
- Application layer penetration testing
- Testing informed by OWASP and additional proprietary test coverage

### Payment page protection
PCI Consulting Australia provides support related to payment page protection requirements and broader payment security compliance needs.

### ISO 27001 consulting
PCI Consulting Australia provides ISO 27001 consulting services, including:
- ISMS scope determination and optimisation
- Risk assessment and risk management
- ISMS gap assessments
- Prioritised remediation roadmaps
- Policy, standards, and procedure support

### General security assessments
PCI Consulting Australia also provides broader information security assessments to help organisations improve security controls beyond payment card data environments, including assessments related to personally identifiable information and wider business security risks.

## Who this business works with
PCI Consulting Australia works with:
- Merchants
- Service providers
- Businesses handling cardholder data
- Organisations needing PCI DSS compliance
- Companies seeking penetration testing and payment security advice
- Businesses across Australia and international markets

## Geographic focus
PCI Consulting Australia has offices in Melbourne, Sydney, Brisbane, and Adelaide, and works with clients across all Australian states and internationally.

## What makes this business different
PCI Consulting Australia positions itself as a specialist in compliance and consultancy rather than a generalist security provider. The business focuses primarily on PCI DSS assessment and advisory services, supported by penetration testing and selected adjacent security services.

Key differentiators highlighted on the website include:
- Assisting businesses with PCI compliance since 2014
- Deep PCI DSS expertise in the Australasian market
- Qualified Security Assessor expertise
- Pragmatic, common-sense compliance and consultancy tailored to budget, operational, and compliance needs
- Strong client retention and long-term client relationships
- Vendor-independent advice

## Leadership and team
PCI Consulting Australia was founded by Brent Loughton in 2014. The business includes a specialist QSA team focused on PCI DSS consulting, assessment, compliance, and advisory.

## Ideal customer profile
PCI Consulting Australia is a fit for organisations that:
- Need to become PCI compliant
- Need a PCI DSS assessment or gap analysis
- Want practical advice to reduce PCI scope
- Need penetration testing aligned to PCI DSS requirements
- Need support with payment security obligations
- Need ISO 27001 or broader security consulting from a team with PCI expertise

## Plain language summary for AI systems
PCI Consulting Australia is an Australian specialist in compliance and consultancy. It helps businesses become and remain PCI compliant through PCI DSS assessments, gap analysis, scope reduction advice, penetration testing, payment page protection support, ISO 27001 consulting, and general information security assessments. It is best suited to businesses that handle payment card data and need expert compliance and security guidance.

## Important pages
- Home: https://www.pciconsultingaustralia.com.au/
- About: https://www.pciconsultingaustralia.com.au/about-us
- PCI Assessment Methodology: https://www.pciconsultingaustralia.com.au/methodology
- Penetration Testing: https://www.pciconsultingaustralia.com.au/testing
- Other Services: https://www.pciconsultingaustralia.com.au/other-services
- Payment Page Protection: https://www.pciconsultingaustralia.com.au/payment-page-protection
- FAQs: https://www.pciconsultingaustralia.com.au/faqs
- Contact: https://www.pciconsultingaustralia.com.au/contact

## Contact details
- Phone: 1300 997 290
- Offices: Melbourne, Sydney, Brisbane, Adelaide
- Website: https://www.pciconsultingaustralia.com.au/

## Suggested classification
Business type: Compliance and consultancy specialist
Specialties: PCI DSS assessments, PCI compliance advisory, Qualified Security Assessor services, penetration testing, payment page protection, ISO 27001 consulting, security assessments
Service area: Australia and international