DISP FUNDAMENTALS
How to apply for DISP membership in Australia
DISP membership is not a single form. Here is the order that actually works: scope the four domains, gather evidence, write the business case, then submit.
Read the article →INSIGHTS
DISP and defence security, explained plainly
Practical notes on what actually matters when Defence reviews an application, and what's changing in the framework around it.
GOVERNANCE
DISP Security Officer requirements: who should hold the role
Every DISP application needs a designated Security Officer. The role is not ceremonial — it is how Defence sees accountability across governance, personnel, physical and cyber.
Read the article →DISP FUNDAMENTALS
DISP membership for SMEs and Defence subcontractors
Primes increasingly require DISP membership before they will engage a subcontractor. SMEs do not need TOP SECRET theatre — they need the right level, domain by domain.
Read the article →PHYSICAL SECURITY
DISP physical security domain: what Defence actually expects
Physical security in DISP is proportional. Entry Level is not a vault. Higher levels are not solved by a new alarm sticker. Match the facility to the classification.
Read the article →PERSONNEL SECURITY
DISP personnel security and AS 4811:2022 screening
Personnel security is not 'we trust our people.' DISP expects screening to AS 4811:2022, a clearance pathway where needed, and ongoing suitability — including contractors.
Read the article →APPLICATION
Common DISP application mistakes that stall membership
Most stalled DISP applications are not unlucky. They are overscoped, under-evidenced, or unanswered. Here are the patterns we see, and how to avoid them.
Read the article →APPLICATION
How long does DISP membership take?
There is no official stopwatch. Well-scoped Entry Level packs move in weeks. Overscoped applications with cyber gaps can sit for months. Here is what actually drives time.
Read the article →GOVERNANCE
DISP membership vs ISO 27001: what Australian suppliers mix up
ISO 27001 is a management system certification. DISP is Defence membership across four security domains. One does not automatically give you the other.
Read the article →MSP
DISP ongoing compliance: why membership is not the finish line
The membership letter is not the end of DISP. Controls decay. Reporting is due. Essential Eight has to be kept at ML2. Plan the operating model before you celebrate.
Read the article →DISP FUNDAMENTALS
DISP Entry Level vs Level 1: which should you apply for?
Entry Level covers OFFICIAL. Level 1 covers PROTECTED and needs a business case. Most businesses over-ask. Here is how to choose without guessing.
Read the article →CYBER BASELINE
DISP membership cyber domain: Essential Eight Maturity Level 2 explained
DISP membership now expects Essential Eight Maturity Level 2 across corporate IT for the cyber domain. Here is what ML2 actually requires, why it changed, and how to approach the uplift without over-scoping.
Read the article →CYBER BASELINE
Essential Eight ML2 checklist for DISP membership applicants
Use this Essential Eight ML2 checklist to pressure-test your DISP membership cyber domain readiness before you submit — covering MFA, patching, admin rights, application control and backups.
Read the article →DISP FUNDAMENTALS
Essential Eight Maturity Level 2: what DISP membership really requires
Essential Eight Maturity Level 2 is not a buzzword on a DISP form — it is the practical cyber bar most applicants must clear. Here is what ML2 means and how it differs from older baselines.
Read the article →DISP UPDATES
New DISP changes in 2026: what Australian suppliers should watch
New changes are coming to DISP membership expectations and the cyber baselines behind them. This briefing covers what is shifting in 2026 and what to do now so you are not rebuilding twice.
Read the article →DISP FUNDAMENTALS
DISP membership requirements for the ICT cyber domain
DISP membership requirements in the cyber domain hinge on scope, Essential Eight Maturity Level 2, and evidence. Here is how to read the requirement without drowning in framework jargon.
Read the article →CYBER BASELINE
Essential Eight for DISP membership: why ML2 is the cyber gate
Essential Eight for DISP membership is no longer optional conversation. Maturity Level 2 is the cyber gate most suppliers hit first — here is how to approach it without confusing frameworks.
Read the article →CYBER BASELINE
Essential Eight is being retired: what it means for DISP members
In June 2026 the ASD confirmed Essential Eight will be phased out over roughly two years, replaced by a broader Essentials series. Here's the timeline, what stays useful, and what to do while the detail firms up.
Read the article →DISP FUNDAMENTALS
DISP membership levels explained: pick a level per domain
The four DISP levels map to OFFICIAL, PROTECTED, SECRET and TOP SECRET — but you choose a level per domain, not one for the whole business. Here's how that actually plays out, including who can sponsor a clearance and who can't.
Read the article →MORE ARTICLES ADDED REGULARLY