Before applying
Before applying, it is important to:
- Be familiar with the Defence Security Principles Framework (DSPF) Principle 16 and Control 16.1 (Defence Industry Security Program) and the Defence Industry Security Program (DISP) membership level requirements.
- Determine ability to meet the requirements for the DISP membership level that is being applied for.
-
Identify a Chief Security Officer (CSO) and Security Officer (SO).
Chief Security Officer and Security Officer roles and responsibilities factsheet (PDF, 707.79 KB)
-
Organise the security governance documentation and go through the DISP Membership Requirement Checklist to help build the evidence to support the DISP application.
-
Have an established email address in the format of DISP@your entity name.
-
Satisfy requirements for foreign ownership, control or influence.
Foreign ownership control and influence fact sheet (PDF, 644.62 KB)
- Ensure that all information provided about the entity matches information recorded in the Australian Securities and Investments Commission register, especially any registered business address and ABN/ACN.
- CSO’s and SO’s should obtain a Australian Government Digital Identity, which is linked to the entity via Relationship Authorisation Manager.
- Find out more information on the Digital ID and RAM requirements over on the DISP Member Portal, under the heading Digital ID and Authorisation Management.
Submitting an application
Complete the application on the DISP Member Portal.
The first step when entering the DISP Member Portal is to update your profile. This includes providing Australian Government Security Vetting Agency (AGSVA) personal security clearance details and acknowledging whether the CSO and SO have completed SO training.
After the profile is complete, there are 9 sections of the application that will need to be filled out:
- Entity details
- Officer details
- Contracts and panels
- Physical and ICT
- Membership levels
- Foreign ownership, control and influence
- Cyber questionnaire
- Attachments
- Preview and submit.
Once the application is complete and prior to submitting:
- Ensure that the CSO has reviewed the application in full.
- Update any required information appropriately.
- Double check the information to ensure its accuracy.
Application processing
Defence continues to experience significant demand for DISP accreditation. Recent growth and changes to the delivery model, have contributed to a backlog. As a result, Defence is actively working to reduce this backlog.
All current applications have been assigned to a processing officer and are actively being processed. Defence prioritises applications based on entities that:
- have current Defence contracts or subcontracts
- are taking part in Defence tenders or panels
- support the Defence supply chain
- align with key government priority initiatives.
Application Submission and Documentation Timeframes
Applications commenced in the DISP Portal must be submitted within 60 business days. Applications that are not submitted within this timeframe will be removed from the portal, and a new application will be required.
Under current processes, mandatory documentation is requested after submission. Applicants are provided with 10 business days to respond to the initial request for documentation, followed by a further 10 business days for a first reminder, and an additional 10 business days prior to application withdrawal.
Planned DISP Membership System enhancements, to be implemented at the end of May, will require all mandatory documentation to be submitted prior to application submission. This change is intended to streamline the process and reduce delays associated with incomplete applications.
Processing timeframes may vary depending on the complexity of the application and the quality of information provided. Applicants can assist in minimising delays by submitting complete security documentation upfront and responding promptly to any requests for further information.
Conditional membership pathway
DISP has introduced a conditional membership pathway to reduce delays. This allows applicants to progress without fully completing their Essential Eight (E8) Maturity Level 2 Maturity Action Plan (MAP) before membership is granted.
A 12 month MAP extension is also available for existing entities that have submitted their MAP and are waiting for a cyber assessment.
Ongoing improvements
In 2026, DISP is focused on:
- improving the customer experience
- strengthening compliance and assurance
- keeping industry informed of updates and enhancements.
Industry input remains critical, especially for complex or higher level risk applications. This includes meeting stronger ICT security requirements under the E8 and under the E8 and Foreign Ownership, Control and Influence requirements.
Defence is also improving the DISP Membership system through increased automation and simpler policy settings. These changes aim to make the end to end process faster and easier to use.