Company sizeMultinationals
DISP membership is open to businesses incorporated in Australia. [Draft] For a multinational, that means fitting DISP alongside global policies, systems and teams. We align the implementation with your organisation's size, maturity and experience in Defence.
Domain focus/ from this brief
Scan
Eligibility requires a business incorporated in Australia with an ABN.
[Draft] Shared global IT and security platforms must still meet the DISP requirements of your chosen level.
[Draft] Group-wide policies need Australian governance documentation that maps them to DISP.
[Draft] Your Chief Security Officer and Security Officer must be able to obtain Australian security clearances and act for the Australian business.
DISP membership is open to businesses incorporated in Australia that hold an ABN, have someone able to obtain a Defence security clearance, and are financially viable. [Draft] For a multinational, that is usually the Australian subsidiary or entity that delivers the Defence work.
[Draft] Global IT environments, shared policies and offshore reporting lines all need to be mapped against DISP's four domains. [Draft] The gap analysis identifies where the Australian entity needs its own controls and where group-wide arrangements already meet the requirements.
[Draft] Defence considers foreign ownership, control or influence as part of a DISP application. [Awaiting Garraan's guidance on how it advises multinationals on foreign ownership, control or influence.]
[Awaiting confirmation of Garraan's experience with multinational clients.] We work with your Australian leadership and global teams to scope the program, write the documentation and lodge the application.
Understand the membership levels to work out the level your organisation needs.
Entry Level
EL
Clears to
OFFICIAL: Sensitive
Entry Level brings your organisation to modern information security standards. Approval clears you for information up to and including OFFICIAL: Sensitive. We deliver it as a fixed-price, all-inclusive package.
Level 1
L1
Clears to
PROTECTED
Level 1 expands the Entry Level scope to meet Defence's additional requirements, and clears your organisation for information up to and including PROTECTED. It also lets you sponsor personnel security clearances up to Baseline.
Level 2
L2
Clears to
SECRET
Level 2 lets your company store and handle SECRET information and take part in classified procurement. Defence sets high standards across all four domains, including third-party certification of your physical and IT systems and a mandatory site inspection.
Level 3
L3
Clears to
TOP SECRET
Level 3 grants access to TOP SECRET information and projects of the highest sensitivity. Defence sets its highest standards across all four domains. Implementation and maintenance are challenging and costly, but the commercial upside is typically significant.
Every engagement starts with a complete audit of your existing processes across the four DISP domains: governance, personnel, physical and cyber security.
We write the policies, processes and plans your organisation needs to meet Defence’s requirements for identifying, assessing and managing security risk.
Incorrect lodgement costs companies time and contracts, and can lead to a rejected application. We prepare and lodge your application and handle Defence’s questions.
[Draft] Your business must be incorporated in Australia, hold an ABN, have someone able to obtain a Defence security clearance, and be financially viable. We confirm your eligibility in the first consult.
Every DISP member must designate both roles, and each has prerequisites a staff member must meet before taking it on.
The Chief Security Officer (CSO) must be a senior executive, typically a director, board member, involved shareholder or other high-level executive. The CSO owns the company's DISP compliance and builds its security culture.
The Security Officer (SO) is the hands-on role: advising staff and management on security, annual reporting, annual security awareness training, managing clearances and reporting to Defence. An office manager, operations manager, IT manager or Defence project lead often fills it. The SO reports to the CSO.
Please use a business email address. We reply within [Awaiting response time].
We will confirm whether DISP suits your business and which level you need, with no obligation.