What DISP membership costs, and why it varies

All questions→

1. How much does it cost?

   Entry Level is a fixed-price, all-inclusive package. Higher levels are priced after the initial consult. [Awaiting whether prices or ranges should be published.]

2. How are consultancy costs calculated?

   All DISP consultancy pricing is specific to your company, because organisational risk factors vary significantly. For Entry Level we have standardised base costs in line with Defence's suggested estimate. For higher levels, we price the work after the initial consult, once we have developed your risk profile.

   Your implementation costs depend on how compliant you already are. You may already meet most requirements, or need significant work in some domains but not all four. The gap analysis shows where you stand, and at that point your costs become clear.

3. What does Level 3 compliance cost?

   It varies significantly with your current security posture and the work needed to close the gap. Costs can include IT upgrades (licensing, servers, migrations and implementation), physical security upgrades (locks, safes, access controls, audit and certification), employee training and regular compliance audits.

   Certification of IT or physical security is among the largest costs, and it tends to rise with company size and complexity, for example operating across multiple sites rather than one.

   [Awaiting confirmation of whether an indicative Level 3 cost can be published.]

4. How long does it take?

   [Awaiting typical timeframes per level from the business.] Every project has a predictable timeline agreed up front, with weekly or fortnightly progress meetings.