DISP COMPLIANCE
FOR MANUFACTURING
COMPANIES
Australian defence manufacturers supplying CASG, prime contractors, or AUKUS programs must hold current DISP membership. The DSPF applies to any manufacturer that accesses classified technical data, operates in controlled facilities, or handles controlled unclassified information in the course of Defence production work.
MANUFACTURING DISP REQUIREMENTS
Capability Acquisition and Sustainment Group requires DISP membership for all suppliers accessing classified technical data or controlled facilities
US International Traffic in Arms Regulations apply to Australian manufacturers in AUKUS Pillar II supply chains — DISP is a prerequisite for ITAR access
Clearance levels required for manufacturing personnel with access to PROTECTED technical drawings, specifications, and classified production data
Defence Security Principles Framework applies to all four domains for manufacturers — governance, personnel, ICT, and physical security of production facilities
THE COMPLIANCE IMPERATIVE
Why DISP Is Non-Negotiable for Australian Defence Manufacturers
Defence manufacturing is one of the most heavily regulated sectors within the DISP framework. CASG requires DISP membership for all suppliers who access classified technical data, operate within controlled Defence facilities, or handle controlled unclassified information in the course of production work. For manufacturers in the AUKUS supply chain, DISP membership is a prerequisite for ITAR access — without it, you cannot legally receive US-origin technical data for AUKUS Pillar II programs.
The physical security domain is particularly demanding for manufacturers. Defence requires a formal physical security assessment of any production facility where classified work occurs — covering perimeter security, access controls, CCTV coverage, and secure storage for classified technical documentation. For manufacturers operating multiple sites, each site requires its own physical security assessment and must be listed in your Security Management Plan.
Operational technology (OT) security is an emerging challenge for defence manufacturers. The Essential Eight ML2 mandate applies to all systems that process, store, or transmit classified or sensitive Defence information — including CAD workstations, production management systems, and quality management systems that handle controlled technical data. For manufacturers with legacy OT environments, this often requires a phased uplift program.
AUKUS Pillar II is driving significant new compliance obligations for Australian manufacturers. The AUKUS compliance framework requires alignment with US CMMC 2.0 for manufacturers in the AUKUS supply chain — and DISP membership is the Australian baseline that underpins CMMC alignment. Manufacturers who achieve DISP accreditation now are better positioned to meet CMMC Level 2 requirements as they are formalised for Australian industry.
AUKUS PILLAR II
The AUKUS Industrial Base Security Requirement
AUKUS Pillar II creates a trilateral industrial base spanning Australia, the United Kingdom, and the United States. Australian manufacturers participating in this base must satisfy the security requirements of all three nations simultaneously — a compliance challenge that traditional consulting approaches cannot address at scale.
AUKUS participation requires demonstrated compliance with DISP under the DSPF and — for US-origin technology — ITAR/EAR export controls. DISPulse maps DISP, ITAR/EAR and PSPF controls simultaneously, identifying overlapping requirements and eliminating duplicated remediation effort.
AUKUS COMPLIANCE STACK
DISP DOMAINS FOR MANUFACTURERS
What DISP Requires From Your Manufacturing Operation
Governance & Security Management
Personnel Security
ICT & OT Security
Physical Security
SUPPLY CHAIN SECURITY
Securing Your Manufacturing Supply Chain
DISP obligations extend beyond your own facility. As a manufacturer in the Defence supply chain, you are responsible for the security posture of your suppliers and subcontractors — including foreign ownership, control and influence (FOCI) assessments and the flow-down of security obligations through subcontractor security deeds. DISPulse maintains a live register of supplier DISP status and FOCI risk so you can evidence supply chain security to Defence at any time.
THE SERIOUS DEFENCE PROCESS
From Gap to Certified in 90 Days
Manufacturing Security Assessment
DISPulse maps your manufacturing operations against all four DISP domains — including physical security of production facilities and OT security of production floor systems. You receive a prioritised remediation register within 5 business days.
Security Plan Development
DISPath consultants develop your Security Management Plan — covering classified technical data handling, production facility access controls, and incident response procedures tailored to your manufacturing environment.
Application Preparation
DISPulse generates your complete DISP application package: Security Plan, personnel clearance register, physical security assessment, and supporting evidence mapped to DSPF requirements.
Ongoing Compliance
DISPulse monitors your posture continuously, triggers ASR generation annually, and alerts you to regulatory changes across DISP, ITAR, and AUKUS supply chain requirements.
ITAR/EAR COMPLIANCE
Protecting ITAR-Controlled Technical Data on the Shop Floor
Australian manufacturers working with US-origin defence articles — including technical data, software, and hardware subject to the United States Munitions List (USML) — must implement access controls that prevent unauthorised disclosure to foreign nationals, including employees who are not Australian or US citizens. This requirement applies to engineering drawings, manufacturing process specifications, test procedures, and any documentation derived from ITAR-controlled source material.
DISPeer provides a sovereign Australian cloud environment with granular access controls, audit logging, and data residency guarantees that satisfy both ITAR technology transfer requirements and DISP physical security obligations. All data remains within Australian jurisdiction, with no routing through US or third-country infrastructure.
DISPulse maintains a live register of ITAR/EAR-controlled assets within your environment, tracks authorised user access, and generates the documentation required for DDTC compliance audits and Australian DISP security assessments simultaneously.
MANUFACTURING ASSESSMENT
Book Your DISP Gap Assessment
We assess your manufacturing operations against all four DISP domains including physical security and OT security.
ITAR PREREQUISITE
DISP membership is a prerequisite for ITAR access in AUKUS Pillar II supply chains. Manufacturers without DISP accreditation cannot legally receive US-origin technical data for AUKUS programs — regardless of their existing security posture.
SOLUTIONS FOR MANUFACTURERS
Topical Cluster
Related Industry Guides
Aerospace & Aviation
Aerospace contractors face the most complex compliance stack — DISP, ITAR export controls, AUKUS Pillar II technology sharing, and Essential Eight ML2.
Engineering Firms
Engineering firms handling classified technical data must satisfy the same four DSPF domains — governance, personnel, ICT, and physical security.
Logistics Providers
Logistics companies transporting or storing classified Defence materiel face strict physical security and chain-of-custody requirements.
Defence Subcontractors
Subcontractors accessing classified Defence information must hold their own DISP membership — your prime contractor's accreditation does not cover you.
SERIOUS DEFENCE
Your DISP Application.
Our Expertise.
Serious Defence has guided Australian manufacturers through DISP accreditation across CASG supply chains, AUKUS programs, and prime contractor relationships. We understand the unique intersection of production operations and DISP compliance.