CISO52 takes Australian businesses through the Defence Industry Security Program in five phases. Engage us for a single phase, or let us run the whole program and stay accountable for the result.
Each phase has a defined output and timeframe, so you always know what you are paying for and what comes next.
An evidence-based baseline of where you stand against DISP Entry Level and Level 1 across governance, personnel, physical and cyber security. Includes an Essential Eight Maturity Level 2 assessment of the corporate ICT you use to work with Defence.
Targeted remediation of the gaps that stop you meeting the DISP cyber requirement, prioritised by risk, effort and commercial impact. We work alongside your IT provider or do the hands-on work ourselves.
Right-sized Security Policies and Plans (SPPs), registers and procedures: CSO and Security Officer roles, AS 4811:2022 screening, incident and contact reporting, overseas travel briefings, insider threat and security awareness.
We prepare the DISP application and Cyber Security Questionnaire with you, assemble the evidence, and support your CSO through Defence's questions during assessment.
Membership is an ongoing obligation. We prepare the Annual Security Report, keep your SPPs current, validate annual acknowledgements by Defence-engaged staff, report changes of circumstance and keep you ready for Defence assurance activity.
One engagement covering all five phases, with a CISO52 CISO accountable from the first assessment through to each year's Annual Security Report. Ideal for businesses without an in-house security team.
Eligible SMEs can apply to the Defence Industry Development Grants Program (Security Stream), which co-funds up to 50% of eligible DISP uplift. Our readiness assessment produces the Maturity Action Plan Defence looks for, and we help you scope and prepare the application.
Program rules, caps and closing dates are set by Defence and may change. Costs incurred before a grant agreement are not eligible.
Tell us about your security challenges to discuss how we can help. Start with a 30-minute strategy call with a CISO, or a fixed-price DISP readiness assessment with a costed plan to close the gaps.
