DISP MEMBERSHIP,
DONE FOR YOU.
Fixed-scope DISP readiness consulting, the DISPulse compliance platform, and DISPeer sovereign Australian cloud — everything a defence contractor needs to achieve and sustain DISP membership.
DISP IS SLOW,
EXPENSIVE,
AND UNFORGIVING.
DISP membership is the entry ticket to classified Defence work — but the application process rewards preparation and punishes guesswork. Under the current Member Portal rules, all mandatory documentation must be uploaded before submission, and every application must be submitted within 60 business days of starting. What changed and why it matters →
A well-prepared Entry or Level 1 application takes around 3–6 months; Level 2 and above runs 6–12 months or more, with personnel clearances often on the critical path.
Defence charges no application fee — the cost is compliance itself: the independent Essential Eight assessment, documentation, physical and ICT uplift, scaled to your starting maturity.
Defence reports a significant DISP application backlog. Incomplete applications clog the pipeline — which is exactly why the upfront-documentation and 60-business-day rules now exist.
THREE CONNECTED SOLUTIONS.
ONE OUTCOME: DISP MEMBERSHIP.
Most DISP providers sell hours. We built the whole stack: consultants who scope and drive your application, a platform that runs compliance as an operating system, and sovereign infrastructure for defence-facing work. Use one, or all three — they are designed to compound.
DISPath
A structured consulting program that takes you from gap assessment to a complete, submission-ready DISP application — fixed scope, fixed price, no hourly billing surprises.
DISP readiness consultingDISPulse
The compliance operating system for Australian defence — DISP, Essential Eight ML2, CMMC 2.0, PSPF and ISO 27001 mapped once, evidenced continuously, with one-click Annual Security Reports.
DISP compliance softwareDISPeer
Sovereign Australian hosting for defence-facing workloads — a controlled cloud environment that strengthens your ICT security posture and data sovereignty under DISP.
sovereign cloud for defenceHOW IT WORKS: ASSESS → REMEDIATE → CERTIFY
Because the Member Portal now enforces upfront documentation and a 60-business-day submission clock, the order of operations matters: do the gap work first, start the portal application only when your evidence is ready.
ASSESS
We assess your organisation against all four DISP security domains — security governance, personnel, physical, and ICT & cyber — and confirm the membership level your contracts actually require. You get a prioritised gap register and a fixed scope of work before anything is lodged.
REMEDIATE
We close the gaps: the Security Management Plan, Essential Eight ML2 evidence, physical security uplift and personnel clearance sponsorships — with every artefact captured in DISPulse so it doubles as ongoing compliance evidence, not shelfware.
CERTIFY
With documentation complete, we prepare and review your application, you submit it through the DISP Member Portal, and we support you through Defence's Entry Level Assessment — then keep you compliant through the Annual Security Report cycle.
WHO NEEDS DISP MEMBERSHIP?
DISP membership is required where Defence work or a contract mandates it — typically any access to classified information, systems or facilities. Increasingly, primes expect it from subcontractors as a condition of engagement.
Software and cloud vendors selling into Defence.
Sector guide Engineering FirmsClassified technical data and CASG contract requirements.
Sector guide Logistics CompaniesPhysical security and chain of custody for classified materiel.
Sector guide Universities & ResearchClassified research, foreign interference and data sovereignty.
Sector guide AerospaceITAR, AUKUS Pillar II and platform-level security.
Sector guide Legal FirmsClassified briefs, privilege-safe systems and PSPF obligations.
Sector guide ManufacturingAUKUS supply chain, OT security and secure facilities.
Sector guide Defence SubcontractorsYour prime's membership does not cover you — flow-down obligations apply.
Sector guide Data CentresSovereign hosting, certified zones and cleared operations staff.
Sector guide ICT & CyberE8 ML2, the Cyber Security Questionnaire and DSPF Control 16.1.
Sector guideTHE DISP GUIDES
Every topic, one dedicated guide. Start with the complete guide, or jump straight to the question you need answered.
DISP MEMBERSHIP AUSTRALIA: THE COMPLETE GUIDE
The hub page for everything below — what DISP is, who needs it, the four levels and four domains, the application process, costs, and your ongoing obligations as a member.
What is DISP?
The Defence Industry Security Program is Australia's security accreditation for organisations working with Defence — four membership levels set independently across four security domains. Applications are lodged through the DISP Member Portal.
What DISP membership is, in plain EnglishMembership levels
Entry, Level 1, Level 2 and Level 3 map to the classification of information you can access — from OFFICIAL to TOP SECRET. Most SMEs need Entry Level or Level 1. Levels are chosen per security domain, driven by your contracts.
DISP membership levels explainedEssential Eight ML2 — and the Essentials transition
Essential Eight Maturity Level 2 has been mandatory for every DISP member since 30 September 2024. ASD is retiring the Essential Eight in favour of the Essentials series — here is what carries forward and what changes.
E8 ML2 requirements for DISPDISP vs ISO 27001
ISO 27001 demonstrates good security practice but grants no access to classified Defence information — and does not substitute for DISP. Many defence organisations hold both, using ISO 27001 as the foundation and DISP as the Defence overlay.
DISP vs ISO 27001 comparedWhy applications fail
Incomplete Security Management Plans, uncleared key personnel and Essential Eight evidence gaps account for most stalls and rejections. Every one of them is avoidable with a structured gap assessment before you start the portal application.
The common failure modes, and how to avoid themWhat it costs
Defence charges no application fee, but achieving compliance is a real investment — for most SMEs an indicative $30,000–$100,000 depending on starting maturity, including the independent Essential Eight assessment and remediation.
Full DISP cost breakdownTracking the Essential Eight retirement? Read the E8 → Essentials transition guide →
DON'T STALL IN THE BACKLOG.
Start your DISP Readiness Assessment today. We'll identify your gaps, scope the work, and prepare your application to maximise first-attempt success.