Without a Defence Industry Security Program (DISP) membership, your SME is locked out of the classified supply chain. It serves as the direct mechanism to sponsor AGSVA clearances for your team. It proves your security maturity to demanding Defence primes. If you intend to handle sensitive data or deploy personnel to secure facilities, DISP is not optional—it is the baseline.
What is DISP and its role in Defence procurement
DISP is the security vetting and compliance framework managed by the Defence Industry Security Branch (DISB). It ensures private sector partners meet the security standards required to protect Defence assets, personnel, and information. Defence mandates DISP membership as a baseline requirement for procurement contracts involving classified or sensitive material.
The program evaluates businesses across four critical domains: governance, personnel security, physical security, and cyber security. SMEs must demonstrate compliance with the Defence Security Principles Framework (DSPF) and the Information Security Manual (ISM). For cyber security, this typically involves reaching a baseline maturity under the Essential Eight framework.
Direct benefits of DISP membership
DISP membership explicitly removes barriers to entry for Defence tenders and procurement panels. It grants businesses the authority to sponsor personnel security clearances (Baseline, NV1, NV2, TSPV) independently of a specific Defence contract. Members also receive direct support from Defence security advisors and access to classified threat intelligence networks.
- Contract qualification: Meet the mandatory prerequisite for Defence tenders.
- Clearance sponsorship: Sponsor staff for required AGSVA security clearances.
- Information access: Receive authorisation to store and process classified Defence information.
- Threat intelligence: Access ASD and Defence cyber threat sharing platforms.
Indirect advantages for business growth
Holding a DISP membership acts as a verifiable marker of security maturity for clients outside the Defence sector. It demonstrates comprehensive governance and risk management capabilities that align with federal government standards. This verified security posture accelerates vendor onboarding processes with state governments and heavily regulated critical infrastructure providers.
SMEs with DISP membership also experience lower customer acquisition costs when partnering with larger Defence prime contractors. Primes actively seek DISP-accredited subcontractors to reduce their own supply chain risk and compliance overhead. Operating a DISP-compliant facility forces the implementation of robust internal processes, which inherently reduces operational risk and protects corporate intellectual property.
Eligibility and application overview
Australian businesses holding an ABN or ACN are eligible to apply for DISP membership. The application process demands strict adherence to the Defence Security Principles Framework (DSPF).
- Determine Level: Select Level 1 for baseline governance, or Levels 2/3 for physical secure rooms and advanced cyber controls.
- Appoint Officers: Formally designate a Chief Security Officer (CSO) and a Security Officer (SO).
- Implement Controls: Deploy required cyber security measures, typically aligned with the Essential Eight.
- Submit Application: Provide detailed security policies and evidence to the DISB for rigorous assessment.
- Pre-Assessment Review: Engage professional DISP readiness services to verify prerequisites and prevent lengthy delays.
How to leverage DISP for future contracts
Maximising contract success requires actively promoting your DISP status to procurement officers and prime contractors. Ensure your membership level is prominently listed in all capability statements, tender responses, and AusTender registrations. Maintain an active roster of cleared personnel to enable rapid deployment when contract opportunities arise.
Sustained compliance is mandatory to retain the membership and its associated competitive advantages. Implement continuous monitoring of security controls and submit the required Annual Security Report accurately and on time. Failing to maintain standards results in membership revocation and immediate disqualification from active Defence contracts.
Frequently Asked Questions
Do SMEs need DISP membership to work with Defence?
Yes, if the work involves accessing classified information, assets, or facilities. While some unclassified contracts may not explicitly mandate it, DISP membership is increasingly treated as a baseline expectation for all supply chain partners.
How long does the DISP application process take?
The assessment phase typically takes between three to six months after submission. This timeframe extends significantly if the application is incomplete or if the business fails to provide adequate evidence of security controls.
Can a business sponsor clearances before obtaining DISP?
No. A business cannot independently sponsor AGSVA security clearances without being a DISP member. Without DISP, personnel can only be cleared if a Defence agency directly sponsors them for a specific active contract.
What cyber security standard is required for DISP?
SMEs must demonstrate alignment with the ASD Essential Eight framework. The specific maturity level required depends on the DISP membership level targeted, with Level 1 typically requiring Maturity Level 1 across the strategies.