IndustryMaintenance & Support Services
Maintenance and support providers work on Defence equipment, sites and systems. DISP membership is increasingly a condition of that work, and it covers the people you send as much as the systems you run.
Domain focus/ from this brief
Scan
Personnel security covers clearances, training and access for your staff and contractors.
[Draft] Manuals, maintenance records and system data can be sensitive, and must be handled under your governance documentation.
[Draft] Staff with privileged access to equipment and sites need to recognise and report potential threats.
[Draft] Support contracts run for years, so membership must be maintained throughout.
Government and Prime Defence tenders increasingly mandate DISP membership, including from subcontractors throughout the supply chain. [Draft] For maintenance and support providers, that often includes the staff who work directly on Defence equipment and sites.
Personnel security is the management of security clearances, training and access to classified information and assets. Level 1 lets you sponsor clearances up to Baseline in-house. Every engagement includes insider threat awareness training, so staff understand their responsibilities and how to report potential security breaches.
Every engagement includes an annual maintenance program and three months of support. Your Security Officer then runs annual reporting and annual security awareness training for all staff, and our compliance maintenance support complements your internal team.
[Awaiting confirmation of Garraan's experience with maintenance and support providers.] We audit your current practices, write the documentation, train your officers and lodge your application.
Understand the membership levels to work out the level your organisation needs.
Entry Level
EL
Clears to
OFFICIAL: Sensitive
Entry Level brings your organisation to modern information security standards. Approval clears you for information up to and including OFFICIAL: Sensitive. We deliver it as a fixed-price, all-inclusive package.
Level 1
L1
Clears to
PROTECTED
Level 1 expands the Entry Level scope to meet Defence's additional requirements, and clears your organisation for information up to and including PROTECTED. It also lets you sponsor personnel security clearances up to Baseline.
Level 2
L2
Clears to
SECRET
Level 2 lets your company store and handle SECRET information and take part in classified procurement. Defence sets high standards across all four domains, including third-party certification of your physical and IT systems and a mandatory site inspection.
Level 3
L3
Clears to
TOP SECRET
Level 3 grants access to TOP SECRET information and projects of the highest sensitivity. Defence sets its highest standards across all four domains. Implementation and maintenance are challenging and costly, but the commercial upside is typically significant.
Every engagement starts with a complete audit of your existing processes across the four DISP domains: governance, personnel, physical and cyber security.
Insider threat awareness training is part of every Entry Level engagement. We set up a program your staff complete and your SO can run.
DISP obliges members to keep their Chief Security Officer and Security Officer trained. We train both roles and support them as obligations come up.
DISP membership comes with ongoing obligations. Our maintenance support complements your internal team and reduces the load on senior executives.
Entry Level does not allow self-sponsorship. Level 1 lets you manage personnel clearances in-house and sponsor up to Baseline. Level 2 lets your Security Officer sponsor and manage clearances up to Negative Vetting 1 (NV-1). Many firms seek Level 3 for self-sponsorship up to Negative Vetting 2 (NV-2).
Your CSO and SO need clearances of their own to sponsor others. At Level 2, for example, the SO must hold at least NV-2.
Membership comes with ongoing obligations. Entry Level engagements include three months of support after approval, and we develop an annual maintenance program for you. Your Security Officer then handles annual reporting and annual security awareness training for all staff. Our compliance maintenance support can complement your internal team and reduce the load on senior executives.
Please use a business email address. We reply within [Awaiting response time].
We will confirm whether DISP suits your business and which level you need, with no obligation.