The Opportunity in Numbers
The Henderson Defence Precinct is the largest defence industry opportunity Western Australia has ever seen. An initial $12 billion Commonwealth commitment, total infrastructure costs that independent planning suggests could reach $25 billion, and around 10,000 jobs over two decades across shipbuilding, submarine sustainment and surface fleet maintenance. With the site and boundary confirmed on 24 August 2026, the program has moved from possibility to pipeline.
But Henderson is not one contract — it is hundreds. Concept design and site characterisation are underway now (Bechtel and AECOM respectively). Early and enabling works, marine and civil construction, utilities, transport upgrades, housing and community infrastructure will follow, ahead of head contracts for the major facilities themselves. Every one of those packages will flow security and compliance obligations down through the supply chain.
The Non-Negotiables
1. DISP membership — your own, not your prime's
The most common misconception in the defence supply chain is that a prime contractor's accreditation covers its subcontractors. It does not. If your business accesses classified Defence information — drawings, schedules, site data, or even commercially sensitive material with a security classification — you must hold your own DISP membership. Flow-down security obligations are written into Defence contracts and enforced through them. Read more in our guide to DISP compliance for defence subcontractors.
2. Personnel security clearances
Staff working inside precinct security zones or on classified packages will need AGSVA clearances — Baseline at a minimum, NV1 for most submarine-adjacent work. Clearance processing is measured in months, not weeks, and it is the single most common critical-path item for businesses new to Defence. Initiating clearances for key personnel now — before you need them — is the cheapest schedule insurance available.
3. Essential Eight ML2
DISP's ICT domain requires Essential Eight Maturity Level 2 across the systems your business uses to correspond with Defence. For construction and marine services firms that have never faced a cyber compliance bar, this is typically the longest-lead technical uplift — start with a gap assessment, not a procurement.
4. Export controls and nuclear obligations
AUKUS Pillar II content brings ITAR and EAR exposure for anything touching US-origin technology, and the submarine sustainment component adds nuclear safety and radiological protection requirements. If your work package involves US or UK technical data, your compliance program needs export control registration and technology access controls — not just DISP.
Positioning Now — The 90-Day Playbook
- Register and research. List your business on the Defence Supplier Portal and industry capability registers, and track Bechtel, AECOM, Austal, Civmec and BAE Systems supplier programs.
- Scope your DISP target level. Most precinct subcontractors will need Entry or Base level membership. Applying at the wrong level wastes months — our DISP membership levels guide explains how to choose.
- Run a gap assessment. Map your current posture across the four DSPF domains — governance, personnel, physical and ICT security — against your target level.
- Start clearances. Nominate your Security Officer and begin AGSVA processing for the staff who will hold classified roles.
- Budget honestly. Our DISP membership cost breakdown covers what WA SMEs should actually budget for compliance.
How Serious Defence Helps
Serious Defence prepares Australian businesses for defence supply chain work. DISPath provides structured DISP readiness consulting — gap assessment, Security Plan development and application support on a fixed scope and timeline. DISPulse automates ongoing compliance, including the Annual Security Report every DISP member must submit. DISPeer provides sovereign cloud infrastructure for businesses that need a compliant ICT environment without building one. Talk to a DISP consultant about your Henderson pipeline.