What is DISP?

 

The Defence Industry Security Program (DISP) is a risk mitigation program that exists to protect the integrity of Australia's Defence capability. In an ever-evolving environment where the security of Defence's people, information, assets and infrastructure is vital, the program supports defence industry suppliers to:

​

• Develop and maintain their responsibilities regarding security;

• Establish good governance, systems and practices in order to mitigate risks; and

• Safeguard sensitive information and assets in the supply chain.

 

Why is it important?

 

The Australian Department of Defence requires its suppliers to hold an appropriate level of DISP membership when they are:

 

• Working on sensitive or classified information or assets;

• Storing or transporting Defence weapons or explosive ordnance;

• Providing security services for Defence bases and facilities; and/or

• As a result of a Defence business requirement.

 

Whilst membership is not mandatory in all circumstances, it is highly recommended that those wanting to supply to the defence sector obtain a DISP membership. Having a DISP membership shows your commitment to the industry and is a great business development asset. It’s also becoming more common for Defence prime contractors to ask their suppliers for it.

 

How it works

 

DISP offers four levels of industry membership, depending on your business requirements. The team at De Stefano & Co can help you to determine the appropriate level of membership you require across the categories of Governance, Personnel Security, Physical Security and ICT/Cyber Security. The four levels of industry membership are:

 

• Entry Level – Unclassified

• Level 1 – Protected

• Level 2 – Secret

• Level 3 – Top Secret

 

For most businesses, Entry Level membership is recommended as a good starting point, as businesses wanting to achieve higher levels of membership must be able to substantiate the need for that higher level. 

 

It’s also possible for a DISP member to hold different membership levels for different categories. For example, a DISP member may hold Level 1 membership for Governance and Personnel Security, but only Entry Level for Physical and ICT/Cyber Security.

​

Please note: Governance must always match or exceed the highest level of membership sought for any other category.

 

Eligibility Criteria

 

In order to obtain a DISP membership, businesses must:

​

• Be registered as a legal business entity in Australia;

• Be financially solvent;

• Have a designated officer who can obtain an Australian security clearance in order to fulfil the role of a Chief Security Officer (CSO);

• Have a designated officer who can fulfil the role of Security Officer (SO);

• Complete a Foreign, Ownership, Control and Influence (FOCI) declaration which allows DISP managers to make informed decisions about potential security risks associated with their business; and

• Not have any relationships with listed terrorist organisations, regimes subject to Australian sanctions laws, nor any persons and/or entities on DFAT’s Consolidated List.

​

Ongoing requirements

 

It’s important to note that after obtaining a DISP membership, there are ongoing requirements that will need to be met. We can support businesses with these requirements through our Ongoing Compliance Assurance (OCA™) Program.

​

Costs

 

Whilst there are no costs associated with the DISP application process - or the certification and accreditation of facilities by Defence - there are costs associated with:

​

• Implementing the required security measures for accreditation; and

• Obtaining security clearances for personnel (where necessary).

 

Businesses should only submit their applications once they meet all of the requirements for the DISP membership level they want to achieve.

 

How De Stefano & Co can help

 

We simplify the DISP application process for our clients by breaking the work down into three phases: