DISP MEMBERSHIP AUSTRALIA

WHAT IS DISP MEMBERSHIP?

The Defence Industry Security Program (DISP) is the Australian Government's security accreditation for organisations that work with the Department of Defence. Membership demonstrates that your organisation meets the security requirements of the Defence Security Principles Framework (DSPF) — and it is the prerequisite for accessing classified Defence information, systems and facilities.

DISP is not a one-off certificate. It is an ongoing membership with continuous obligations: an Annual Security Report, incident reporting, material-change notifications and security controls that must be maintained — not just achieved. Applications are managed through the DISP Member Portal, where all mandatory documentation must be uploaded before submission, and every application must be submitted within 60 business days of starting.

WHO NEEDS IT?

DISP membership is required where Defence work or a contract mandates it — typically any organisation that accesses, stores or transmits classified Defence information, whether dealing directly with Defence or as a subcontractor to a prime. It is not required for every defence-adjacent business, but primes increasingly expect it from their supply chain as a condition of engagement.

Membership is open to Australian organisations of all sizes, including SMEs and sole traders. Defence scales its expectations to the size and risk profile of the applicant — but the four security domains apply to everyone.

THE APPLICATION AT A GLANCE

Assess your gaps against the DSPF, remediate (Security Management Plan, Essential Eight ML2 evidence, physical and personnel security), then apply via the DISP Member Portal. Under the current portal rules, all mandatory documentation must be uploaded before submission, and the application must be submitted within 60 business days of starting — so preparation comes first. Defence then assesses through the Entry Level Assessment: a documentation review, a phone interview and the Cyber Security Questionnaire.

WHAT IT COSTS

Defence charges no application fee. The real cost is achieving compliance: for most SMEs an indicative $30,000–$100,000 depending on starting maturity — including an independent Essential Eight assessment (indicatively $15,000–$40,000 of that, commissioned voluntarily from providers such as IRAP assessors), documentation, remediation and physical or ICT uplift.

ONGOING OBLIGATIONS

Membership must be maintained. Every member submits an Annual Security Report (ASR) — declared by the Chief Security Officer every 12 months, within 10 business days of the membership anniversary, via the DISP Member Portal — alongside incident reporting, material-change notifications and clearance renewals.