DISP compliance for WA Defence suppliers
Defence asks DISP members to meet or exceed Essential Eight Maturity Level 2 on the corporate systems they use to correspond with Defence. We build those controls, document how they work and keep the evidence ready for your application.
Your price in two minutes, no email needed. Or call 1300 787 429.
★★★★★ 4.9 on Google from 60+ reviews
- ML2Essential Eight alignment for Powertech, helping win a defence client
- $0DISP membership fee; the cost is in the security work
- 4Security domains, from governance to cyber
- ISO27001 and 9001 certified, audited externally
Trusted by 300+ organisations, including
What DISP membership asks of you
The Defence Industry Security Program (DISP) is how Defence manages security across its supply chain. Membership is open to any Australian entity. Depending on the work or the contract, it may be mandatory.
Four membership levels
Entry level covers OFFICIAL and OFFICIAL: Sensitive information. Levels 1, 2 and 3 cover PROTECTED, SECRET and TOP SECRET.
Four security domains
ICT and cyber security, physical security, personnel security and security governance.
Two named roles
A Chief Security Officer responsible for security arrangements and culture. A Security Officer who develops and implements your security policies and plans.
Essential Eight Maturity Level 2
Members must meet or exceed ML2 across the corporate ICT systems they use to correspond with Defence.
Foreign ownership declared
A declaration of any foreign ownership, control or influence goes in with the application and again whenever it changes.
Tell us who is asking about your security. A technical consultant will scope it with you and send a fixed quote.
Clear roles save time and money
No IT provider can make you a DISP member. This is how the work splits and where we fit.
This is a summary. Defence decides membership and your advisers can confirm what a contract requires. See Essential Eight maturity levels.
Defence
Assesses your application, decides your membership level and is the authority on what the requirements mean.
The decision maker
Your CSO and Security Officer
Own your security arrangements, policies and culture. They are your people, and Defence expects them to lead.
Roles you appoint
Austin Technology
Builds and runs the ICT and cyber controls, writes up how they work and keeps the evidence ready for your application and reviews.
The ICT and cyber domain
From readiness review to Maturity Level 2
The cyber domain usually takes the longest, so it is the right place to start. Your team keeps working while controls roll out.
- 01
Readiness review
We check the systems you use with Defence against ML2 and list the security documents you have and the ones you still need.
- 02
Choose the scope
Lift your whole environment to ML2, or ring fence the systems and people that work with Defence. We cost both where it makes sense.
- 03
Build to ML2
Application control, patching, MFA, admin rights, macro settings, hardening and backups brought to ML2 in planned stages.
- 04Ongoing
Evidence and review
Written evidence for your application, then quarterly reviews on SecureShield Command so you stay at ML2 as your systems change.
When we are the right partner for DISP
We would rather tell you what sits outside our work than have you find out halfway through an application.
A strong fit
- Your ICT is the gap, and you need ML2 and the evidence to show it
- You are a WA engineering, manufacturing or resources firm bidding for Defence work
- You want the team that runs your IT to run your DISP controls as well
- You need your Defence facing systems hosted in Perth on infrastructure we manage
Probably another option, and we will say so
- Physical security or facility work, which sits with a physical security specialist
- Personnel vetting and security clearances, which run through the government process
- A paper exercise that leaves your systems unchanged
SecureShield Command maintains Essential Eight ML2 and includes an ongoing vCISO, at $100 per person per month excluding GST. The uplift to ML2 is quoted as a fixed price project. SecureShield plans.
specialists Powertech supplies across mining, oil and gas, renewables, infrastructure and defence
Defence ready work for a WA engineering firm
ThreatLocker, Huntress, conditional access, BitLocker and staff training took Powertech to Essential Eight ML2 alignment, and it progressed towards DISP and ISO 27001. Powertech migrated from AWS to our private cloud and went on to win a defence grade client. We are certified to ISO/IEC 27001 and ISO 9001 ourselves, so the provider running your Defence facing systems is externally audited too.
Read the case studyA top 50 MSP in Australia, three years running
Rated by our clients on Cloudtango, and audited every year on security, quality and cyber controls.
Top 50MSPs in Australia
- 2024
- 2025
- 2026
Ranked on client satisfaction and service depth.
Read our 25 client reviews on Cloudtango
ISO 27001
Information securityHow we handle your data, passwords and access, audited every year.
How we protect your data
ISO 9001
Quality managementDocumented processes, so every engineer works to the same standard.
How we work
SMB1001 Gold
Cyber security, Level 3The 27 control cyber standard we take clients through, held ourselves.
Check our certificateDISP compliance questions
What Defence suppliers ask us before they start. Anything else, call 1300 787 429.
Do we need DISP membership to work with Defence?
Not always. Defence says membership may be mandated depending on the type of work or the contract. It is not mandated in all circumstances. Check the tender or contract first and ask your Defence contact if it is unclear.
What cyber security does DISP require?
Defence asks members to meet or exceed Essential Eight Maturity Level 2 across the corporate ICT systems used to correspond with Defence. How you show it can change over time, so we confirm the current requirements with you at the readiness review.
How long does it take to become a member?
It depends on where you start and how much of your environment is in scope. After the readiness review we give you a timeline for the cyber work. Defence sets its own timeframes for assessing applications.
What does DISP cost?
Defence charges no membership fee. The cost is in the security work: controls, documents and ongoing management. The readiness review ends with a fixed quote, and SecureShield Command, which maintains ML2, is $100 per person per month excluding GST.
Can an IT provider handle DISP, or do we need a DISP consultant?
We handle the ICT and cyber domain and the documents that support it. For personnel and physical security, or help with the application itself, a specialist DISP consultant can help. If you use one, we work alongside them.
What happens once we are a member?
Membership comes with ongoing obligations, such as keeping your security arrangements current and telling Defence about changes in foreign ownership, control or influence. On SecureShield Command we keep your controls at ML2 and review the evidence with you every quarter.
Defence work starts
with ML2.
Tell us about your Defence work and your systems. A technical consultant will scope what Maturity Level Two needs with you and send a fixed quote.
- A reply within two business hoursA technical consultant reads every enquiry and comes back to you.
- Proven in 90No onboarding fee, 14 days to fix anything you raise and nothing owing if you leave in the first 90 days. How it works
Or call 1300 787 429 or email sales@austintechnology.com.au