Old Akro,
Aivation ID Australia are a private company that were set up, according to their website, "as a service provided to Merimbula Airport in 2005".
Yes CASA made a complete hash of it at first and then outsourced it to this private company that was already doing it, via a direct link from their website.
AFAIK without any tender process and certainly without any reference to other issuing bodies, so that most people think this is the only way to get an ASIC. Now this system has been hacked. Not all issuing bodies use online application forms which are vulnerable to hacking.