Garraan, home
Menu

RoleCompliance Officers

Mitigating DISP membership risk

You already manage a growing list of standards, governance, training and certification requirements. Our role is to minimise the burden of implementing DISP and build systems that make ongoing compliance sustainable.

Book a consult

Domain focus/ from this brief

Scan

  • GOV GovernanceFocus
  • PER PersonnelNoted
  • PHY PhysicalNoted
  • CYB CyberNoted

Key challenges

  1. Another framework to carry

    DISP adds governance, training and certification requirements to those you already manage.

  2. Documentation and audits

    Ongoing compliance needs current documentation and regular audits.

  3. Annual obligations

    Annual reporting and security awareness training for all staff continue after approval.

  4. Aligning with existing standards

    Your cyber pillar may build on ISO 27001 or the Essential Eight, so the frameworks need to fit together.

  1. The four pillars of DISP

    DISP rests on four pillars:

    • Personnel security: managing security clearances, training, and staff and contractor access to classified information and assets
    • Physical security: access controls and zoning for your offices, warehouses, factories or other premises, so only the right staff reach classified material
    • Cyber security: the security and resilience of your networks and devices, aligned with frameworks like the Essential Eight or ISO 27001
    • Governance: the procedures, plans and documents that govern the other three pillars

  2. Working with your Security Officer

    The Security Officer owns the company's ongoing compliance: reporting, managing security clearances and liaising with Defence, reporting to the Chief Security Officer. Our consultants work directly with your SO to develop the policies and procedures that make up the governance pillar.

  3. Sustainable ongoing compliance

    Every engagement ends with an annual maintenance program, and your CSO and SO are trained on the documentation before you apply. After approval, our maintenance support complements your internal team and reduces the load on senior executives.

  4. How we help

    We audit all four pillars, write documentation that fits your existing frameworks, and set up the annual program that keeps you compliant.

    Book a consultSee our process

Four levels, one for each classification

Understand the membership levels to work out the level your organisation needs.

All levels

Entry Level

EL

Clears to

OFFICIAL: Sensitive

The baseline tier, and the right fit for most of the supply chain.

Entry Level brings your organisation to modern information security standards. Approval clears you for information up to and including OFFICIAL: Sensitive. We deliver it as a fixed-price, all-inclusive package.

Suited to
Most companies in the Defence supply chain, particularly SMEs with some exposure to Defence and government or those newly entering the market.
Pricing
Fixed price, all inclusive
View Entry Level

Level 1

L1

Clears to

PROTECTED

Strict security standards, and in-house clearances up to Baseline.

Level 1 expands the Entry Level scope to meet Defence's additional requirements, and clears your organisation for information up to and including PROTECTED. It also lets you sponsor personnel security clearances up to Baseline.

Suited to
Companies that want to self-sponsor security clearances, and companies closely involved in Defence, such as those designing or manufacturing critical combat systems and components.
Pricing
Priced after the initial consult
View Level 1

Level 2

L2

Clears to

SECRET

Store and handle SECRET information and join classified procurement.

Level 2 lets your company store and handle SECRET information and take part in classified procurement. Defence sets high standards across all four domains, including third-party certification of your physical and IT systems and a mandatory site inspection.

Suited to
Organisations deeply embedded in the Defence industry, or working on highly classified projects.
Pricing
Custom package
View Level 2

Level 3

L3

Clears to

TOP SECRET

Access to projects of the highest sensitivity, for seasoned Defence firms.

Level 3 grants access to TOP SECRET information and projects of the highest sensitivity. Defence sets its highest standards across all four domains. Implementation and maintenance are challenging and costly, but the commercial upside is typically significant.

Suited to
Mature organisations with considerable expertise and history in the Defence sector, involved in the most classified technologies, operations and defence works.
Pricing
Custom package
View Level 3

What each level includes

FeatureELEntry LevelOFFICIAL: SensitiveL1Level 1PROTECTEDL2Level 2SECRETL3Level 3TOP SECRET
Overview
Information clearedOFFICIAL: SensitivePROTECTEDSECRETTOP SECRET
Deliverables scoped toEntry LevelLevel 1Level 2Level 3
Commercial
Pricing modelFixed priceAfter consultCustom packageCustom package
Governance
Security Officer selectionIncludedIncludedIncludedIncluded
Chief Security Officer selectionIncludedIncludedIncludedIncluded
Gap analysis across four domainsIncludedAdditional questioningAdditional questioningAdditional questioning
  • Included
  • Partly
  • Not included

See the full comparison25 rows

Relevant services

All services

  • DISP documentation development

    We write the policies, processes and plans your organisation needs to meet Defence’s requirements for identifying, assessing and managing security risk.

  • CSO and SO training

    DISP obliges members to keep their Chief Security Officer and Security Officer trained. We train both roles and support them as obligations come up.

  • Compliance maintenance

    DISP membership comes with ongoing obligations. Our maintenance support complements your internal team and reduces the load on senior executives.

By role

Explore other audiences

Roles

  • Directors & CEOs

    What DISP asks of company leadership: the commercial case, the Chief Security Officer role and the right level for your business.

  • CTOs & IT Managers

    For CTOs and IT managers: the cyber requirements at each DISP level, choosing a standard and planning accreditation without over-investing.

  • Business Development

    For business development leaders: what DISP membership costs, what it opens up, and how clearance readiness can win work.

All roles

Industries

  • Engineering & Design

    Engineering and design firms building military hardware and Defence technology. Most tenders in the field require DISP membership.

  • Manufacturing & Fabrication

    Manufacturers and fabricators supplying Primes and Defence. Protect drawings, parts and premises, and meet the DISP level your contracts require.

  • Consultants & Contractors

    Advisory, engineering, cyber, project management and logistics consultants. A mixed-level approach can give you clearance flexibility at a lower cost.

  • Aerospace & Space

    Military aviation, R&D and satellite technology firms. Manufacturers in the sector typically need Entry Level at minimum.

  • Shipbuilding & Naval Engineering

    Shipbuilders, naval architects and their suppliers. Meet Prime and Defence requirements across yards, workshops and design offices.

  • Building & Construction

    Construction firms working on Defence projects. Level 1 personnel and governance for self-sponsorship is often a pivotal advantage.

  • Logistics & Supply Chain

    Logistics and supply chain firms supporting Defence. Entry Level is often sufficient, depending on the clearances your staff need.

  • Maintenance & Support Services

    Maintenance, repair and support providers working on Defence equipment and sites. Clear your people and keep your membership current.

  • MSPs & MSSPs

    MSPs and MSSPs supporting Defence suppliers. Choose the right cyber standard, reach the required Essential Eight maturity and plan accreditation.

All industries

Company size

  • SMEs

    For SMEs entering or growing in Defence. Entry Level often suits best, delivered as a fixed-price package.

  • Large Enterprises

    For large organisations with multiple sites and teams. Coordinate DISP across functions and build on the frameworks you already run.

  • Multinationals

    For multinationals with Australian operations. Fit DISP alongside global policies, systems and reporting lines.

All company sizes
Compliance Officers

Questions

All questions
  1. What are the four DISP domains?

    DISP assesses your business across four domains, sometimes called pillars or categories:

    • Governance: the policies, procedures, plans and documents that govern the other three domains.
    • Personnel security: managing security clearances, training, and staff and contractor access to classified information and assets.
    • Physical security: access controls and zoning that keep classified material in your offices, warehouses or factories away from people who should not reach it.
    • Cyber security: the security and resilience of your networks and devices, aligned to frameworks such as the Essential Eight or ISO 27001.
  2. Do our CSO and SO need ongoing training?

    Yes. Under DISP's governance requirements, companies must keep their Chief Security Officer and Security Officer trained. We train both roles on your documentation before you apply, and we offer ongoing training and compliance support after approval.

  3. Do we have to report security incidents?

    Yes. Members must report any suspected or actual security breach to Defence immediately. We help you build the processes and governance procedures that make that reporting compliant.

Compliance Officers

Start your DISP journey

Please use a business email address. We reply within [Awaiting response time].

Please use your work address. Personal mailboxes (Gmail, Yahoo…) are not accepted.

Optional, if you would rather we call.

Which DISP level are you aiming for?

Required

Book a complimentary initial consult

We will confirm whether DISP suits your business and which level you need, with no obligation.

Book a consultCompare levels