Membership context
Confirm the work you intend to do and the membership level it points to, with the people responsible for your application.
DISP Membership & Readiness Consulting
The Defence Industry Security Program (DISP) is the Department of Defence program that sets security requirements for Australian businesses working in, or seeking to join, the Defence supply chain. DISP membership is granted at a level across governance, personnel, physical, and information and cyber security. Umbrella Tech helps businesses prepare the information and cyber security part, and the evidence behind it, alongside their wider DISP application.
The problem
The challenge we help you address
A Defence contract or prime contractor asks for DISP membership, and the business is unsure what level it needs or how far its IT environment is from the requirements. Cyber security is usually the area with the most technical work, and it has to fit with the governance, personnel and physical security work running in parallel.
The outcome
What the engagement should deliver
A clear view of the cyber security requirements for the level you are applying for, an environment that meets them, and documented evidence your Security Officer can use in the application and in ongoing membership obligations.
How we can help
Readiness assessment
Compare your information and cyber security controls with the requirements for that level.
Cyber security implementation
Close the gaps in identity, endpoints, networks and information handling.
Evidence
Document the controls and their operation for the application and later reporting.
Membership levels and responsibilities
DISP has an Entry Level and Levels 1 to 3, which can be set separately for each security category depending on the sensitivity of your Defence work. Members appoint a Chief Security Officer (CSO) and a Security Officer (SO) and take on ongoing obligations, including reporting. People often call it "DISP accreditation", but Defence grants membership; it is not a certificate an adviser can issue. Our role covers the cyber security contribution, scoped alongside the people responsible for the other categories.
Assessment and implementation options
AssessmentDISP Readiness Assessment
Get a structured DISP application from Umbrella Tech, with clear findings, risk priorities and an actionable…
Explore → ServiceDISP Cybersecurity ImplementationImplement DISP cyber security requirements: identity, endpoint, network and information controls, documented…
Explore →Frequently asked questions
Can't see your question? Ask us directly →
What is DISP membership?
It is Defence's recognition that a business meets the program's security requirements at a given level. Members can show Defence and prime contractors that they can handle Defence information, people and assets appropriately for that level.
Who needs it?
Businesses whose Defence contracts require it, particularly where work involves classified information or assets, and businesses that want to show their security posture when competing for Defence work. Your contract and Defence's guidance determine the level required.
What are the main requirements?
Requirements span governance, personnel security, physical security, and information and cyber security, scaled to the membership level. The cyber security requirements commonly draw on ASD guidance such as the Essential Eight.
How long does implementation take?
It depends on the level you need, your current controls and how quickly the governance, personnel and physical work progresses alongside the cyber work. We confirm scope and timing in discovery.
How does it relate to other frameworks?
Essential Eight work and an ISO/IEC 27001 management system can both support DISP preparation, but neither replaces DISP membership. Defence sets the requirements and determines membership outcomes.
Plan the next improvement
Tell us about the Defence work you are pursuing and where your DISP application is up to. We will help define a practical starting point for the cyber security work.