Security governance
A nominated Chief Security Officer and Security Officer, documented security policies and plans, and an insider threat program.
Since 2015
ISO 27001
5.033 Google reviews
6am to 6pm
What is DISP?
The Defence Industry Security Program explained
The Defence Industry Security Program (DISP) is the Department of Defence’s security membership program for businesses in the defence supply chain. It sets the minimum security standards Defence expects from suppliers across governance, people, premises and IT systems, under Principle 16 of the Defence Security Principles Framework.
DISP membership is mandatory if you work with classified information or assets, handle weapons or explosive ordnance, or provide security services to Defence bases. It is also increasingly written into contracts by Defence and the primes, so subcontractors and manufacturers are often asked for it too.
Independently certified
We understand the importance of protecting data, and we set ourselves apart through our ISO 27001 certification and SMB1001 Gold (Level 3) certification with CyberCert. From safeguarding company data to client information, we’re dedicated to upholding the highest standards of information security.
DISP requirements
The four DISP security domains
Personnel security
Employment screening for staff, annual security awareness training, and security clearances where your work requires them.
Physical security
Protection for your premises, information and assets, scaled to the sensitivity of the work you do for Defence.
ICT and cyber security
Your corporate IT systems must meet the full Essential Eight at Maturity Level 2. For most businesses, this is the biggest piece of work.
DISP membership levels
Entry Level to Level 3
DISP membership is assessed for each security domain, so you can hold different levels in different areas. Most manufacturers and suppliers start at Entry Level.
Entry Level
The baseline for suppliers handling unclassified and OFFICIAL: Sensitive Defence information.
Level 1
For businesses that work with Defence information classified up to PROTECTED.
Level 2
For businesses that work with Defence information classified up to SECRET.
Level 3
For businesses that work with TOP SECRET information and the highest-assurance programs.
DISP for manufacturers
Why manufacturers are being asked for DISP
Manufacturers, engineering firms and fabricators make up a large part of Australia’s defence supply chain. As Defence invests in local industry, primes are passing DISP requirements down to the businesses that make parts, assemblies and equipment for them.
Prime contractor requirements
Primes increasingly require DISP membership from their suppliers before they can tender or be awarded work.
Drawings and technical data
CAD files, drawings and specifications for defence programs need protecting, and access needs to be controlled and recorded.
Engineering and production systems
CNC, CAD and engineering workstations often run specialist or older software. We plan Essential Eight patching and application control around them.
Shop floor staff
Screening and security awareness need to reach everyone involved in Defence work, including production and shift staff.
How we help
Our DISP compliance services
DISP gap assessment
We review your business against the four DISP domains and the Essential Eight, and give you a clear, prioritised list of what needs to change.
Essential Eight Maturity Level 2
Our engineers implement the controls, including application control, patching, MFA, restricted admin access and tested backups.
Governance documentation
We help you prepare the security policies, plans and registers DISP expects, ready for your Chief Security Officer and Security Officer to own.
Membership application support
We help you gather and organise the evidence for your DISP membership application, so missing documents do not hold it up.
Annual Security Report
We help you answer the Cyber Security Questionnaire accurately each year, backed by real evidence from your systems.
Ongoing compliance
We patch, monitor and report on your controls, so you stay compliant between Defence reviews and audits.
Why Insource IT
A certified team that does the work
Many consultants can tell you what DISP requires. We can also implement it, then keep your systems compliant as part of your managed IT.
- ISO 27001 and SMB1001 Gold (Level 3) certified
- Essential Eight implementation and maturity reporting
- Experience supporting engineering and CAD environments
- In-house penetration testing to validate your controls
- Perth based, supporting suppliers across WA and Australia
Our services
We can also help with
Why Work With Us
We don’t just fix problems — we keep your systems running the way they should. Our IT support team blends enterprise-level expertise with a straightforward, human approach. We care about your uptime, your people, and your peace of mind. With transparent pricing, specialist advice, and zero jargon, we make sure technology works for you — not against you. When you need dependable IT and cyber security that just works, Insource IT.
Contact Us →
Testimonials
What our clients say
5.0
33 Google reviews
The entire Insource IT team are so helpful, approachable, non-judgemental, and most importantly, knowledgeable. They will go out of their way to help you, no matter the issue.
Insource IT have your business’s best interest at heart. They’ll go the extra mile to explain where your IT budgets should be spent to keep you up to date with your industry’s security, compliance and IT standards.
Wonderful team! They are always pleasant and easy to reach, and masters at what they do. Highly recommend to anyone needing help in IT.
Latest insights
All insights →
