What the Current Rule Requires
Two rules now govern every DISP application lodged through the DISP Member Portal. First, all mandatory documentation must be uploaded before submission — an application cannot be lodged incomplete and topped up later. Second, the application must be submitted within 60 business days of starting it in the portal. An application that sits half-finished past that window does not queue indefinitely.
For applicants, this inverts the old working assumption. The portal is no longer the place where you discover what Defence wants — it is the place where you present a finished, fully evidenced application.
Why Defence Tightened the Process
Defence has reported a significant DISP application backlog, and its stated intent behind the change is to stop incomplete applications clogging the assessment pipeline. Applications lodged without their Security Management Plan, Essential Eight evidence or personnel security documentation tie up case officers in request-and-wait cycles while fully prepared applicants wait behind them. Requiring complete documentation upfront — and bounding the preparation window — is designed to move genuine, ready applications through faster.
The direction of travel is consistent with the broader tightening of the program: Essential Eight ML2 has been mandatory at every membership level since 30 September 2024, and assessment expectations have been rising across all four security domains — security governance, personnel security, physical security, and ICT and cyber security.
What It Means for Applicants
The practical consequence is simple: do the gap assessment before you start the portal application, not after. The 60-business-day clock is comfortable for an organisation that begins with a clear gap register and a remediation plan — and unforgiving for one that starts the application first and discovers its gaps along the way.
Before starting an application, you should have in hand: a current DISP requirements checklist mapped against your environment, a complete Security Management Plan, Essential Eight ML2 evidence for in-scope ICT systems, and nominated Chief Security Officer and Security Officer roles with clearance sponsorship underway. Our step-by-step DISP application guide walks through the full sequence — eligibility, gap analysis, documentation, portal submission and the Entry Level Assessment.
The Practical Takeaway
None of this makes DISP harder for well-prepared applicants — if anything, a pipeline cleared of incomplete lodgements should reward them with faster assessments. It does raise the cost of improvising. The organisations that will move fastest through the new process are the ones that treat the portal as the last step of preparation, not the first.