From the moment you choose to work with us you become a part of the Defence community. As part of the Defence community, industry personnel need to play their part in keeping Defence’s people, information and assets secure.

This includes reporting security incidents to Defence as soon as possible within 24 hours of discovery.

Reporting not only notifies Defence of potential vulnerabilities, it actively contributes to the ongoing monitoring and management of security.

A security incident is a suspicious approach, event, or action (whether deliberate, reckless, negligent, or accidental) that:

  • fails to meet the expected outcomes of Defence security as outlined in the Defence Security Principles Framework
  • compromises Defence’s protective security arrangements, and
  • results in (or has the potential to) loss, damage, disclosure, or harm to Defence information, assets, and people. 

Examples include, but are not limited to:

  • an unauthorised person accessing your facilities
  • loss, theft or unauthorised access to official or classified Defence information
  • loss or compromise of your access pass/security keys
  • inappropriate handling or storage of official or classified Defence information or materials
  • cyber security incidents
  • any contacts with or approaches from people which are suspicious or unusual.

Tell your Security Officer (SO) about the incident. Your SO will then work with you to complete a security report which they will then submit.

The report needs to be submitted by your SO to Defence within 24 hours of discovery of the security incident.

If you are unable to contact your SO within 24 hours after becoming aware of the incident, you should report the incident yourself to Defence.

You can do this by sending an email to the Defence Security Incident Centre at Please ensure you copy your SO into the email and please include business and after hours contact details.

Yes. As a member of DISP, you must report security incidents.

Reporting a security incident allows Defence to work with your organisation to fix the issue and prevent further loss or compromise.

Even if an incident seems small or harmless the information in your report could be helpful. Information from all security reports is collated and analysed to build insights and identify any patterns.

If you are unsure whether to report or not, it’s best to notify Defence to be safe.

For further information call 1800DEFENCE (1800 333 362) or email

You can also refer to Principle 77 Security Incidents and Investigations in the Defence Security Principles Framework.