Defence Industry Security Program
Readiness, membership and ongoing compliance for the DISP. From your first gap assessment to a managed annual retainer.
DISP servicesHero image placeholder · Daryl to specify
Defence Industry Security · Australia
Security compliance that keeps you eligible for Defence work.
We help Australian organisations achieve and maintain DISP membership, pass IRAP assessments, and meet the security obligations that Defence contracts demand.
What we do
Three practices. One standard of rigour.
Information Security Registered Assessors Program
Independent security assessment against the ISM and PSPF, delivered by IRAP-endorsed assessors. For systems that need formal assurance.
IRAP servicesDefence security advisory
Security governance, risk and posture uplift for Defence-industry organisations. Strategic capability when you need more than a single assessment.
Advisory services
What changed
The rules moved. The bar is higher.
The date full Essential Eight Maturity Level 2 became mandatory for DISP members. The earlier Top 4 and Maturity Level 1 pathway is closed.
The Essential Eight ML2 controls now assessed in Part B of the Defence Cyber Security Questionnaire.
Security Governance, Personnel, Physical and ICT. Each assessed independently against your target DISP level.
Why Acqsus
Compliance has become continuous. We make it manageable.
DISP membership is no longer a one-time approval. It is an ongoing obligation: annual security reports, maturity action plans, drift monitoring and audit readiness, sustained year after year. The same shift applies across IRAP assessment and the wider security expectations placed on Defence suppliers.
We give Defence-industry organisations a single practice to carry that load. We assess where you stand, close the gaps that matter, and keep you compliant as the requirements move.
Why organisations choose us
Assessor-grade work, built for the new baseline.
Assessor-grade rigour
Our assessments mirror the exact questionnaires and control sets Defence uses, so there are no surprises at submission.
Built for the new baseline
Every engagement is structured around Essential Eight Maturity Level 2 and the post-November 2025 requirements.
Readiness to retainer
We take you from first assessment to ongoing compliance under one practice, so nothing falls between providers.
Board-reportable outputs
Our reports are written to brief executives and satisfy auditors, not just to tick controls.
How engagement works
From first call to active delivery in two to three weeks.
Step 01
Discovery call
Confirm your status, target level and timeline.
Step 02
Scoping workshop
Walk through scope and select your engagement model.
Step 03
Statement of Work
Scope, fees, milestones and acceptance criteria, agreed up front.
Step 04
Kick-off
Project plan, workshops scheduled and the evidence request issued.
Speak with us
Discuss your DISP, IRAP or security obligations.
We move from first conversation to active engagement in two to three weeks.
Book a discussion
Or call
[CANBERRA PHONE]