End-to-end support for DISP application — from understanding the requirements through to successful registration. We've helped organisations navigate every domain of DISP and know what it takes to get accepted.
DISP Readiness
E8 Maturity
ML2 ON TRACK
Readiness Score
72%
4 of 5 domains addressed
DISP requirements span personnel security, physical security, cyber security, and governance. You don't know where to start or how these domains connect.
A rejected or delayed application means lost contracts and missed opportunities in the defence supply chain. The stakes are too high to figure this out on your own.
DISP requires specific understanding of ISM, PSPF, and defence security practices that your internal team hasn't encountered before.
Comprehensive evaluation against all DISP membership requirements across every security domain.
Prioritised activities to close compliance gaps, sequenced to minimise disruption to your business.
Assessment and uplift of your E8 maturity — a core prerequisite for DISP cyber security requirements.
Policies, procedures, and governance frameworks aligned to DISP requirements and ISM/PSPF standards.
Hands-on support preparing and submitting your DISP application, ensuring completeness and accuracy.
Evidence-based completion of the Commonwealth Security Questionnaire — accurate and audit-ready.
We evaluate your current security posture against all DISP membership requirements to identify where you stand.
We close the gaps — implementing controls, building policies, and achieving E8 ML2 compliance.
We prepare your DISP application and CSQ, ensuring every requirement is evidenced and documented.
We support you through submission and the Defence assessment process, addressing any queries that arise.
You're a manufacturer or supplier looking to enter the defence supply chain and need to meet DISP requirements for the first time. You need someone to make the process simple.
A prime contractor or contract requirement demands DISP registration within a tight timeframe. You need a team that can start immediately and move quickly.
You're a technology company with cloud or software products that need to meet DISP and potentially IRAP requirements to sell into the defence market.
Federal agency
Delivered executive and board-ready cyber governance papers, stood up a Foreign Ownership Control and Influence process, and supported system accreditation activities across a shared-services environment — so the agency walked into its next review with defensible answers.
Federal agency
Scoped, assessed, and reported on three high-priority SRAs in a single calendar year — an enterprise integration platform, a supplier-security uplift, and a public-facing online services portal with paired penetration testing — all delivered inside the agency's assessment window.
Federal department
Led the department's Essential Eight maturity review using ACSC verification methodology, then ran continuous-assurance activities through annual PSPF reporting and ASD cyber survey submissions — keeping E8 posture live between formal reviews.
E8 ML2 is a core component of DISP cyber requirements. We typically assess and uplift E8 as part of the DISP preparation process, so you don't need to do it separately beforehand — we handle it as an integrated workstream.
Preparation typically takes 3–6 months depending on your current maturity. The application assessment by Defence can take additional months. We work to compress the preparation timeline where possible and ensure you're submission-ready as quickly as your environment allows.
Start with our free health check. We'll give you an indicative view of your readiness and a realistic timeline. Many of our clients begin with this step — it gives you clarity on what's needed without any commitment.
DISP covers governance, personnel security, physical security, cyber security (including E8), and ICT security. Our team has experience across all domains, which means we can support your application holistically rather than just addressing the cyber component.
Yes. DISP has different membership levels depending on the sensitivity of information and materials you'll handle. We help you determine the right level for your business and prepare accordingly — ensuring you don't over-invest or under-prepare.
The application is submitted by your organisation, but we prepare all the materials, review the submission for completeness, and support you through the Defence assessment process. Think of us as your guide through every step of the journey.
For a prepared SME, we can typically move from readiness assessment to Defence submission in 3-4 months. Timelines depend on control gaps, documentation maturity, and Defence's current assessment queue.
DISP engagements are scoped and priced individually because the gap between current state and Defence's requirements varies widely. We'll give you a firm range after a free health check so you know what to allocate.
Self-submissions typically stall on evidence quality and ISM interpretation. Big 4 lack the defence-industry embedded experience. Our team has delivered DISP uplift and governance for federal agencies — we know exactly what Defence reviewers expect.