Canberra is home to the Department of Defence and much of its supply chain, and many Defence contracts ask for DISP membership. Think Technology Australia helps Canberra businesses get DISP-ready. We work out the membership level you need, lift your IT to the required cyber security standard, and support your Chief Security Officer and Security Officer through the application. We are a veteran-owned business, certified to ISO 27001:2022.
Who needs DISP membership in Canberra?
If you tender for Defence work, hold a Defence contract or supply a prime contractor, you are likely to need DISP membership. Some contracts make it a condition of the work. In Canberra that includes:
- Professional services and consulting firms working with Defence
- IT, engineering and technical contractors
- Suppliers and subcontractors to prime contractors
- Small and medium businesses entering the defence supply chain for the first time
What DISP asks of your IT
DISP membership needs an ICT network that meets a recognised cyber security standard. For most Australian businesses, the practical choice is the ASD Essential Eight at Maturity Level Two or above. Defence also expects security governance, documented policies, a security register, an annual security awareness program and an insider threat program.
There are four membership levels: Entry Level (OFFICIAL and OFFICIAL: Sensitive), Level 1 (PROTECTED), Level 2 (SECRET) and Level 3 (TOP SECRET). Most businesses entering the supply chain start at Entry Level. Our DISP membership guide sets out the levels, the four security domains and the full requirements.
How we help Canberra businesses get DISP-ready
- Readiness assessment: we benchmark your business against the DISP requirements through an IT security assessment and show you the gaps.
- Essential Eight and ICT: we assess your current maturity and lift your network to the level DISP requires, usually on Microsoft 365 Business Premium.
- Policies, plans and registers: we help you put security governance and documentation in place.
- CSO and SO support: we guide your nominated officers through the DISP Member Portal and the application.
- Ongoing membership: we help you keep your membership current, including your Annual Security Report and registers.
- Logging and monitoring: Maturity Level Two expects event logs to be collected centrally, protected from tampering and monitored for signs of compromise. We run that monitoring, so it is something you can evidence rather than a policy you have written.
- The practical details: we sort out things like compliant email addresses and cyber insurance evidence.
