Why Good Companies Bid Badly
Every year, capable Australian SMEs decide to chase Defence work, find a tender on AusTender, spend three weeks writing a response — and lose. Usually not on capability or price, but on structure: they were not on the panel the work was flowing through, they did not hold the DISP membership the clause required, or their evidence could not survive evaluation. The playbook below is the sequence that avoids that.
Step 1: Registrations (Week 1)
The administrative foundations are unglamorous but mandatory. Register on AusTender so you can see approaches to market and receive notifications in your categories. Make sure your ASIC details, ABN and registered address are consistent everywhere — Defence's own application guidance flags entity-information mismatches as a source of delay. Join your state defence industry network (AIDN and its state counterparts) — not for the newsletter, but because primes and Defence use these networks to find suppliers, and panel refreshes get discussed there first.
Step 2: Compliance Before Marketing (Months 1–6)
Here is the step everyone wants to skip. Defence's template tenders include an additional-requirements clause stating whether DISP membership is required and at what level per security category — governance, personnel, physical, ICT. For most services work touching Defence information, some level of DISP membership will be required, and "we are working towards it" scores poorly against "we hold it." Start the DISP process now: nominate your Chief Security Officer and Security Officer, initiate their AGSVA clearances (Baseline target ~20 business days; NV1 ~70), scope your Essential Eight ML2 uplift, and build your Security Plan. The cost guide sets out realistic budgets; the requirements checklist shows the full control set.
Step 3: Get on the Field (Panels and Industry Lists)
Most Defence services work flows through pre-qualified panels rather than open tenders. Identify the panels in your category, note their establishment and refresh dates on AusTender, and prepare for the next window. Some panels admit new members periodically; others let you achieve DISP after panel entry but before classified work — the answer is always in the specific RFT. In parallel, pursue subcontracting: primes are under contractual pressure to flow security obligations down, and a compliant, cleared SME is a genuinely scarce find. Our panels guide covers the mechanics in detail.
Step 4: Bid Selectively, Bid Properly
Only then: bid. Read the security clauses first — the DISP requirement, flow-down obligations, FOCI declarations, cyber evidence, clearance requirements — and answer them with current documentation, not promises. A smaller number of fully compliant, evidence-backed responses beats a scattergun of hopeful ones every time. Evaluators are instructed to score what is demonstrable.
The Economics of Doing It in Order
Run backwards, the sequence costs you a year of wasted bids. Run forwards, the compliance spend — typically the low tens of thousands for an SME at Entry or Level 1, indicative — becomes the asset that unlocks every subsequent opportunity, and the Annual Security Report cycle keeps it current. Compliance is not the cost of Defence work; it is the licence to compete for it.
How Serious Defence Helps
This playbook is what DISPath operationalises: gap assessment, Security Plan development, clearance coordination and application support on a fixed scope and timeline. DISPulse then keeps your evidence tender-ready — E8 ML2 monitoring, clearance tracking, and your Annual Security Report generated from live data. Ready to start? Talk to a DISP consultant about your target market.
Image: Business handshake, via Wikimedia Commons (CC BY-SA 2.0).