For a growing number of Defence contracts, particularly those involving classified information or assets, membership of the Defence Industry Security Program (DISP) is a requirement. If you supply, or want to supply, into the defence sector, getting DISP-ready early is worth starting now. For WA businesses in mining services, construction, manufacturing, and professional services, it can open a whole new market.
What DISP is
DISP is administered by the Department of Defence and gives member organisations a recognised security baseline across four domains. Membership tells Defence and prime contractors that your organisation has met the program's security requirements at the relevant level to handle their people, information, and assets appropriately.
The four security domains
| Domain | What it covers |
|---|---|
| Governance | Security officer, policies, risk management, reporting |
| Personnel | Clearances, screening, offboarding |
| Physical | Access control, secure areas, asset protection |
| ICT & cyber | System security, Essential Eight, accreditation |
The ICT domain is where most businesses have the furthest to travel, and it leans heavily on the ASD Essential Eight and, for higher levels, the Defence Security Principles Framework and ASD's Information Security Manual.
Membership levels
DISP has an Entry Level and Levels 1 to 3, set per security domain, reflecting the sensitivity of the work you'll do. You apply for the level your contracts require, there is no need to over-reach. Starting at the entry level and stepping up as opportunities grow is a sensible, lower-cost path.
Getting ready: the path
- Decide the level you need. Match it to the contracts you're chasing.
- Run a gap analysis across all four domains, not just cyber.
- Appoint a security officer and stand up the governance basics.
- Uplift ICT security to the required Essential Eight maturity.
- Document everything: DISP is evidence-driven.
- Apply, then maintain your obligations as a member.
Why start now
DISP readiness takes months, not weeks, and primes increasingly ask about it during, not after, the tender. Businesses that prepare ahead of demand aren't starting the process when a tender already requires membership.
How Umbrella Tech helps
A DISP readiness assessment examines governance, personnel, physical and ICT security against the level you need. We then plan the cybersecurity implementation, including the Essential Eight uplift and the evidence Defence expects to see. Membership decisions remain with Defence.
Discuss DISP readiness with our team.