RoleCTOs & IT Managers
The cyber security landscape keeps changing. We help you maintain strict compliance with modern IT frameworks, limit threat vectors and build an environment that holds up in a breach.
Domain focus/ from this brief
Scan
Defence accepts several standards, and your choice has long-term implications for the business.
Entry Level requires alignment with the Essential Eight, and Level 1 raises the maturity level.
Level 2 requires accreditation of your IT network, and the pathways differ widely in cost.
Specialist advice has often saved clients tens of thousands of dollars in IT implementation costs.
DISP members must implement a minimum standard of cyber security to protect classified data on servers, computers and in cloud environments.
Defence accepts a number of internationally recognised standards. ISO 27001/27002 is one of the most widely applied, but your team or managed service provider may already work with the Essential Eight, NIST or others. The choice has significant short- and long-term implications, so we advise on it from the initial consult.
For Level 2 cyber, pathways such as an IRAP assessment are often costly, but your workflows and commercial opportunities may justify them. A standalone device, or use of the DPN, DSN or DREAMS, is more affordable but not practical for every company. These decisions are often difficult or costly to reverse.
Our cyber implementation consultancy maps your environment to the requirements of your level, and our gap analysis shows where investment is needed before you commit to it.
Understand the membership levels to work out the level your organisation needs.
Entry Level
EL
Clears to
OFFICIAL: Sensitive
Entry Level brings your organisation to modern information security standards. Approval clears you for information up to and including OFFICIAL: Sensitive. We deliver it as a fixed-price, all-inclusive package.
Level 1
L1
Clears to
PROTECTED
Level 1 expands the Entry Level scope to meet Defence's additional requirements, and clears your organisation for information up to and including PROTECTED. It also lets you sponsor personnel security clearances up to Baseline.
Level 2
L2
Clears to
SECRET
Level 2 lets your company store and handle SECRET information and take part in classified procurement. Defence sets high standards across all four domains, including third-party certification of your physical and IT systems and a mandatory site inspection.
Level 3
L3
Clears to
TOP SECRET
Level 3 grants access to TOP SECRET information and projects of the highest sensitivity. Defence sets its highest standards across all four domains. Implementation and maintenance are challenging and costly, but the commercial upside is typically significant.
Every engagement starts with a complete audit of your existing processes across the four DISP domains: governance, personnel, physical and cyber security.
We write the policies, processes and plans your organisation needs to meet Defence’s requirements for identifying, assessing and managing security risk.
DISP membership comes with ongoing obligations. Our maintenance support complements your internal team and reduces the load on senior executives.
Not necessarily. Defence accepts a number of internationally recognised standards for Level 2. ISO 27001/27002 is one of the most widely applied, but your managed services provider or internal IT team may already work to the ASD Essential Eight, NIST or another standard.
The standard you choose has significant short- and long-term implications for your application and your organisation, so we advise on it in the initial consult.
For Level 2 cyber, Defence requires accreditation of your IT network. Pathways such as an IRAP assessment are often costly, though your workflows and commercial opportunities may justify them. A standalone device, or use of the Defence Protected Network (DPN), Defence Secret Network (DSN) or DREAMS, is more affordable but not practical for every company.
These decisions have a significant business impact and are often difficult or costly to reverse, so choose the pathway with advice from someone who knows DISP well.
Please use a business email address. We reply within [Awaiting response time].
We will confirm whether DISP suits your business and which level you need, with no obligation.