Defence Industry Security Program consultants
Get DISP-ready. Win Defence work.
[Draft] Garraan takes Australian businesses from first question to approved membership: gap analysis, documentation, lodgement and ongoing compliance, with clear objectives, fixed pricing and predictable timelines.
Call 1300 251 276Australia-wide
Threat surface
At a glance
- DISP membership levels
- 4
- Security domains assessed
- 4
- Metro and regional centres
- Australia-wide
Four levels. Choose the one your work requires.
Understand the membership levels to work out the compliance level your organisation needs.
Entry Level
Entry Level
The baseline tier, and the right fit for most of the supply chain.
Entry Level brings your organisation to modern information security standards. Approval clears you for information up to and including OFFICIAL: Sensitive. We deliver it as a fixed-price, all-inclusive package.
- Security Officer selection
- Chief Security Officer selection
- Gap analysis across governance, personnel, physical and cyber
- Action plan to close the capability gaps
- Custom governance documentation
- Physical security audit
Level brief
- Clears to
- OFFICIAL: Sensitive
- Suited to
- Most companies in the Defence supply chain, particularly SMEs with some exposure to Defence and government or those newly entering the market.
- Pricing
- Fixed price, all inclusive
Level 1
Level 1
Strict security standards, and in-house clearances up to Baseline.
Level 1 expands the Entry Level scope to meet Defence's additional requirements, and clears your organisation for information up to and including PROTECTED. It also lets you sponsor personnel security clearances up to Baseline.
- Everything in Entry Level
- Deliverables adjusted to Level 1 requirements
- Additional questioning in the gap analysis
- Further provisions in the governance documentation
- Additional cyber security policies
- Essential Eight maturity level increased
Level brief
- Clears to
- PROTECTED
- Suited to
- Companies that want to self-sponsor security clearances, and companies closely involved in Defence, such as those designing or manufacturing critical combat systems and components.
- Pricing
- Priced after the initial consult
Level 2
Level 2
Store and handle SECRET information and join classified procurement.
Level 2 lets your company store and handle SECRET information and take part in classified procurement. Defence sets high standards across all four domains, including third-party certification of your physical and IT systems and a mandatory site inspection.
- Everything in Entry Level and Level 1
- Deliverables adjusted to Level 2 requirements
- Mandatory site inspection
Level brief
- Clears to
- SECRET
- Suited to
- Organisations deeply embedded in the Defence industry, or working on highly classified projects.
- Pricing
- Custom package
Level 3
Level 3
Access to projects of the highest sensitivity, for seasoned Defence firms.
Level 3 grants access to TOP SECRET information and projects of the highest sensitivity. Defence sets its highest standards across all four domains. Implementation and maintenance are challenging and costly, but the commercial upside is typically significant.
- Everything in Entry Level, Level 1 and Level 2
- Deliverables adjusted to Level 3 requirements
Level brief
- Clears to
- TOP SECRET
- Suited to
- Mature organisations with considerable expertise and history in the Defence sector, involved in the most classified technologies, operations and defence works.
- Pricing
- Custom package
What each level includes
Every level builds on the one before it, from our fixed-price Entry Level package to custom packages for Levels 2 and 3.
- Included
- Partly
- Not included
Governance, personnel, physical and cyber
We audit your internal processes across all four DISP domains and close the gap to the level you need.
Governance
Governance
The policies, processes and plans that govern the other three domains. Together they let your business identify, assess and mitigate security risk, build risk profiles, review them regularly and safeguard assets and information from internal and external parties.
- Policies
- Processes
- Plans
- Risk identification, assessment and mitigation
Personnel
Personnel
How you manage security clearances, training, and staff and contractor access to the classified information and assets your company holds. From Level 1, members can self-sponsor employees and contractors to a lower clearance level than their officers hold.
- Security clearances
- Security awareness training
- Insider threat awareness
- Access to classified information
Physical
Physical
Depending on your level, classified material and assets may be held on your premises. Physical security keeps unauthorised people away from them, through access controls and zoning across offices, warehouses and factories. At lower levels many companies find they are close to compliant, as alarms, CCTV and access passes are now common.
- Site surveillance
- Safeguarding
- Zoning of office spaces
- Alarms
Cyber
Cyber
The security and resilience of your networks and devices, from servers and laptops to phones and cloud environments. DISP members must implement a minimum standard of cyber security, aligned to frameworks such as the ASD Essential Eight or ISO 27001.
- Essential Eight alignment
- Cyber security policies
- Network and device controls
- Accreditation at Level 2 and above
From gap analysis to approval, and beyond
Every engagement follows the same tested process, scaled to the level you need.
DISP gap analysis
Every engagement starts with a complete audit of your existing processes across the four DISP domains: governance, personnel, physical and cyber security.
DISP documentation development
We write the policies, processes and plans your organisation needs to meet Defence’s requirements for identifying, assessing and managing security risk.
Application lodgement
Incorrect lodgement costs companies time and contracts, and can lead to a rejected application. We prepare and lodge your application and handle Defence’s questions.
CSO and SO training
DISP obliges members to keep their Chief Security Officer and Security Officer trained. We train both roles and support them as obligations come up.
Compliance maintenance
DISP membership comes with ongoing obligations. Our maintenance support complements your internal team and reduces the load on senior executives.
Insider threat awareness program
Insider threat awareness training is part of every Entry Level engagement. We set up a program your staff complete and your SO can run.
Sectors that benefit from DISP
Compliance that helps companies across industry improve internal processes and secure significant contracts.
Industries
Engineering & Design
Engineering and design firms building military hardware and Defence technology. Most tenders in the field require DISP membership.
Manufacturing & Fabrication
Manufacturers and fabricators supplying Primes and Defence. Protect drawings, parts and premises, and meet the DISP level your contracts require.
Consultants & Contractors
Advisory, engineering, cyber, project management and logistics consultants. A mixed-level approach can give you clearance flexibility at a lower cost.
Aerospace & Space
Military aviation, R&D and satellite technology firms. Manufacturers in the sector typically need Entry Level at minimum.
Shipbuilding & Naval Engineering
Shipbuilders, naval architects and their suppliers. Meet Prime and Defence requirements across yards, workshops and design offices.
Building & Construction
Construction firms working on Defence projects. Level 1 personnel and governance for self-sponsorship is often a pivotal advantage.
Logistics & Supply Chain
Logistics and supply chain firms supporting Defence. Entry Level is often sufficient, depending on the clearances your staff need.
Maintenance & Support Services
Maintenance, repair and support providers working on Defence equipment and sites. Clear your people and keep your membership current.
MSPs & MSSPs
MSPs and MSSPs supporting Defence suppliers. Choose the right cyber standard, reach the required Essential Eight maturity and plan accreditation.
Roles
Directors & CEOs
What DISP asks of company leadership: the commercial case, the Chief Security Officer role and the right level for your business.
Compliance Officers
For chief compliance officers: the four DISP pillars, the documentation behind them and systems that keep compliance sustainable.
CTOs & IT Managers
For CTOs and IT managers: the cyber requirements at each DISP level, choosing a standard and planning accreditation without over-investing.
Business Development
For business development leaders: what DISP membership costs, what it opens up, and how clearance readiness can win work.
Company size
SMEs
For SMEs entering or growing in Defence. Entry Level often suits best, delivered as a fixed-price package.
Large Enterprises
For large organisations with multiple sites and teams. Coordinate DISP across functions and build on the frameworks you already run.
Multinationals
For multinationals with Australian operations. Fit DISP alongside global policies, systems and reporting lines.
Open the door to Defence contracts
[Draft] DISP membership is the baseline for Defence tenders and contracts, and it lifts how your business manages security risk.
Tender for Defence contracts
Be Defence-ready when tendering for and delivering contracts and projects.
Access new markets
Domestic and export defence markets are growing. Membership puts you in a position to compete.
Improve internal security
Prepare for modern risks and meet current standards across your organisation.
Reduce risk
Stronger governance, personnel, physical and cyber security, with a clear plan to maintain it.
Tried, tested and predictable
Clear objectives, fixed pricing and predictable timelines at every step.
- 01
Determine business requirements
An obligation-free meeting to confirm DISP suits your business.
- 02
Select your DISP level
Decide the level you need in each of the four DISP domains.
- 03
Find the capability gap
We audit your governance, personnel, physical and cyber security.
- 04
Implement changes
Our action plan closes the gap to the level you need.
- 05
Apply
We prepare and lodge your application with Defence.
- 06
Membership granted
Ongoing support to keep your membership in good standing.
DISP, answered
What is DISP?
The Defence Industry Security Program supports Australian businesses to understand and meet their security obligations when working on Defence tenders, contracts and projects. It is a tiered membership program covering governance, personnel, physical and cyber security.
Who is eligible for DISP membership?
[Draft] Your business must be incorporated in Australia, hold an ABN, have someone able to obtain a Defence security clearance, and be financially viable. We confirm your eligibility in the first consult.
Which DISP level do I need?
In our experience, Entry Level is sufficient for most companies in the supply chain. Level 1 suits companies that want to self-sponsor security clearances, and Levels 2 and 3 suit organisations working on classified projects. We confirm the right level in your initial consult.
How long does it take?
[Awaiting typical timeframes per level from the business.] Every project has a predictable timeline agreed up front, with weekly or fortnightly progress meetings.
Book a complimentary initial consult
We will confirm whether DISP suits your business and which level you need, with no obligation.