Comprehensive Guide to Applying for DISP Membership

The Defence Industry Security Program (DISP) supports Australian businesses in strengthening their security posture when engaging with Defence. This guide outlines the steps to apply for DISP membership, ensuring your organisation meets the necessary requirements. If you want to see where your organisation stands before you begin, our DISP membership readiness assessment gives you an instant readiness score and shows which requirements you already meet and where the gaps are.

Understand the Program and Requirements

Before applying, familiarise yourself with the DISP framework and requirements. Key resources include:

• DISP Overview
• Eligibility and Suitability Criteria
• Applying for DISP Membership Factsheet

Determine the Appropriate Membership Level

DISP offers four membership levels aligning with security classifications and domains:

• Entry Level: For entities handling OFFICIAL/OFFICIAL: Sensitive information.
• Level 1 (PROTECTED): For entities requiring BASELINE security clearances and handling PROTECTED information.
• Level 2 (SECRET): For entities requiring NV1 clearances and handling SECRET information.
• Level 3 (TOP SECRET): For entities requiring NV2 clearances and handling TOP SECRET information.

Assess your organisation’s needs across the following security domains:

• Personnel Security
• Physical Security
• Information & Cyber Security
• Governance

Assess Eligibility and Gather Documentation

Ensure your organisation meets the following criteria:

• Registered in Australia with an ABN.
• Financially solvent.
• Appointed a Chief Security Officer (CSO) and a Security Officer (SO) who meet the required roles and responsibilities.
• Established a DISP@yourentityname email address hosted in Australia.
• Satisfy Foreign Ownership, Control or Influence (FOCI) requirements.
• No affiliations with listed terrorist organisations or sanctioned entities.
• ICT networks meet one of the following cyber security standards:
  • ASD Essential 8
  • ISO/IEC 27001 and 27002
  • NIST SP 800-171
  • UK Defence Standard (Def Stan) 05-138

Gather necessary documentation, including:

• Organisational structure and ownership details.
• Security policies and procedures.
• Evidence of compliance with cyber security standards.

Complete the Application via the DISP Member Portal

Access the DISP Member Portal to begin your application. Steps include:

• CSO and SO obtain Digital IDs linked to your entity via the Relationship Authorisation Manager (RAM).
• SO initiates and completes the application, providing all required information and documentation.
• CSO reviews and submits the application.

Submit and Await Outcome

After submission, the Department of Defence will assess your application. Processing times may vary based on the level of membership and completeness of your application. Ensure prompt responses to any requests for additional information.

For assistance, contact [email protected].