Chief Compliance Officers – DISP Membership Risks & Maintenance
Mitigating DISP Membership Risks
As the Chief Compliance Officer you are familiar with the never ending and ever increasing standards, governance, training and certification requirements of your company. It is our role to minimize the burden of DISP implementation and create systems that make ongoing compliance sustainable.
Trusted by companies Australia wide
Defence Industry Security Program Compliance
The Four Pillars of DISP
The DISP consists of four key pillars:
Personnel Security
Involving the management and handling of security clearances, training, and access of company staff and contractors to classified information and assets held by the company.
Physical Security
Involving the security of company physical premises – be they offices, warehouses, factories or otherwise; the DISP requires particular access controls and zoning to ensure only required staff have access to classified materials, and to protect from outside actors.
Cyber Security
Involving the information security and resilience built into company networks and end-points (devices like servers, phones, laptops…). The DISP required adherence to frameworks like the Essential 8 or ISO 27001.
Governance
The governance components of the DISP is the series of procedures, plans, and documents that govern the first three pillars of the DISP.
Consultancy Solutions
We can assist
Offering a range of consultancy services to position organisations for success.
Entry Level DISP Membership
Level 2 DISP Membership
Level 3 DISP Membership
Level 1 DISP Membership
Lodgement Of DISP Application
CSO & SO Training & Ongoing Compliance Support
DISP Gap Analysis
Defence industry security program levels
DISP Levels Explained
Gain an understanding of different DISP Membership Levels to determine your organisation’s required compliance level.
Entry Level DISP
Suited to most businesses
We have developed a fixed-price package designed to bring companies into compliance with Entry Level DISP in a short time-frame.
Compliance with Entry Level will grant access to OFFICIAL: Sensitive information.
- Security Officer Selection
- Chief Security Officer Selection
- Gap Analysis: Governance, Personnel, Physical, Cyber
- Action Plan: Diminish capability gaps
- Custom Governance Documentation Provided
- Physical Security Audit
- Insider Threat Awareness Training
- Cyber Implementation Consultancy
- Weekly Progress Meeting: With SO & Stakeholders
- Application Lodgement: Prepare & Lodge of Application
- Interview Preparation: For the SO & CSO
- Response To DoD Recommendations
- Training: SO & CSO Fully Trained on Documentation
- Maintenance: Annual Maintenance Program Developed
- 3 Months Support Included
Level 1 DISP
Additional Inclusions
Compliance with Level 1 DISP requires an expanded scope to meet the department’s additional requirements. Generally the time, complexity and risk factors of implementation are increased. Compliance with Level 1 will grant access to PROTECTED information.
- Everything in Entry Level
- Adjust Deliverables To: Level 1 Requirements
- Additional Questioning in Gap Analysis
- Further Provisions in Governance Documentation
- Additional Cyber Security Policies
- E8 Maturity Level Increased (Cyber)
- Floor plan analysis, FOB & CCTV check
- Action Plan Expanded
Level 2 DISP
Custom Package
Compliance with Level 2 DISP requires considerable expansion of project scope. Compliance with level 2 will grant access to SECRET information. The department has set high standards for Level 2 compliance across all four DISP categories.
Level 2 is suited to organisations deeply embedded in the defence industry or working on highly classified projects.
- Everything in Entry Level, Level 1
- Adjust Deliverables To: Level 1 Requirements
- Mandatory Site Inspection
Level 3 DISP
Custom Package
Compliance with Level 3 DISP requires significant expansion of project scope. Compliance with level 3 will grant access to TOP SECRET information.The department has set the highest standards for Level 3 compliance across all four DISP categories.
Level 3 is suited to organisations involved in the most classified technologies, operations and defence works.
- Everything in Entry Level, Level 1, Level 2
- Adjust Deliverables To: Level 3 Requirements
