// secureos · govern

DISP Readiness

Want to work with Defence? Membership of the Defence Industry Security Program is the gate. We give defence-adjacent businesses an honest, structured path to DISP membership across governance, personnel, physical and cyber security.

DISP  /  Essential Eight ML2  /  ISM-aligned

// does this apply to you

Does DISP apply to my business?

DISP membership is required when a Defence contract obliges it, or when your business stores, handles or transmits Defence classified information. It is not required simply because you sell to Defence. The obligation comes from the contract and the information you hold — not from the sector you operate in.

Are you delivering or tendering for Defence work?

What people get wrong

  • Assuming a Defence contract justifies a higher level. Defence is explicit that holding a Defence contract is not sufficient justification for Level 1, 2 or 3 — those need a business requirement tied to classified work. Entry Level needs no such justification. Applying above the level you can justify slows everything down.
  • Budgeting for one membership per contract. You need one DISP membership for the business, regardless of how many Defence contracts you hold.
  • Expecting Entry Level to sponsor clearances. Sponsoring security clearances is available to DISP members but not at Entry Level. If clearing your own people is why you need DISP, Entry Level will not do it — and that tends to surface late.
  • Forgetting the subcontract counts. Entities engaged in Defence classified work through a subcontracting arrangement are required to hold membership at the levels appropriate to that contract. The obligation reaches you through the prime, not only through Defence.
  • Treating it as an evidence-gathering exercise. Most businesses that struggle already have sound security — they have never written it down to the granularity assessors expect. That turns a document request into writing policy against a tender deadline.
// what it is

The security bar you clear before you can bid

The Defence Industry Security Program (DISP) lets businesses work with Defence and access sensitive or classified information. Membership requires demonstrated security across four domains — governance, personnel, physical and ICT/cyber — and the requirements are real. We won’t pretend approval is fast; we’ll give you a credible path and the evidence to support it.

// what we deliver

What DISP readiness involves

DISP gap assessment

Assess your current state against the membership requirements across all four security domains.

Governance & personnel

Security officer roles, policies, personnel security and the governance DISP expects.

Cyber & Essential Eight uplift

Lift your ICT security and Essential Eight maturity to the required level.

Documentation & evidence

Prepare the security documentation and evidence the application requires.

Membership application support

Guidance through the application and assessment process.

// faq

Frequently asked questions

What is DISP?

The Defence Industry Security Program — membership lets your business work with Defence and handle sensitive or classified information.
It’s not fast. Depending on readiness and entry level, it can take several months — we give you an honest timeline up front.
Yes — DISP has cyber requirements, and Essential Eight maturity (often ML2) is part of demonstrating them.
It depends on the work you’re pursuing — we help you target the right entry level and membership category.
// next step

Get on a credible path to DISP.

Book a call and we’ll assess your readiness and map the steps to membership — without the false promises.