The requirements live in a dozen places
Eligibility pages, the DSPF, member factsheets, the Cyber Security Questionnaire and the Defence Security Register workbook. Working out what applies to your level takes days before you've done any of it.
Early access · For Australian defence-industry SMEs
Get in. Stay in good standing.
Secure Standing turns the Defence Industry Security Program (DISP) into a checklist you can actually finish. Once you're a member, it keeps track of the annual reports, the 24-hour incident clock and the registers that keep your membership current.
- Every item linked to its official source
- Built for teams of 1–50
- Australian-hosted by design
Your DISP clocksMaintain mode
82%
In good standing2 items need attention this month
- Annual Security Reportdue in 38 days
- Security awareness training3 staff due
- Incident report window24h clock ready
- CSO / SO change noticenone open
- Essential Eight ML2 evidence7 of 8 current
Export → Defence Security RegisterM365 · Google Workspace
Illustrative preview. Not a real customer or live data.
1,400+
DISP members in June 2025, with Defence targeting 2,000 [1]
E8 ML2
Full Essential Eight Maturity Level 2 is expected of every member since 15 Nov 2025 [2]
$0
DISP membership fee. The cost is in the controls, the paperwork and the upkeep [3]
15 Oct 2026
ASD launched ASD Essentials, the successor to the Essential Eight [4]
The problem
Getting in is a project. Staying in is a job.
DISP asks a small business to do what large primes have security teams for. Most of the work isn't hard. There's just a lot of it, spread across factsheets, a 100-plus-page policy framework and a spreadsheet register.
Membership has deadlines all year
An annual report tied to your anniversary, incidents reported within 24 hours, officer changes within 14 days, yearly training, register upkeep. Miss one and your standing is at risk.
Essential Eight is changing
Members need full E8 ML2 today, and ASD has launched ASD Essentials as its successor. Your IT provider holds the evidence, but often has no simple way to hand it over.
How it works
One path from "where do we start?" to "we're current".
- Get in
Check your fit and level
Answer a short eligibility check covering entity, officers and foreign ownership, and see which DISP level each domain actually needs.
- Get in
Build your evidence
Work through a checklist that cites the clause behind every item. Use the policy templates, set up your registers and track Essential Eight ML2.
- Get in
Apply prepared
Draft your portal answers, documents and questionnaire responses offline, so the application window and document requests don't catch you out.
- Stay in
Switch to maintain mode
Once you're granted membership, every recurring obligation becomes a clock with an owner, a reminder and an evidence trail, ready for your annual report.
Features
Built for the part everyone underestimates: keeping it.
Maintain-mode automation
We run the DISP calendar so your Security Officer doesn't have to keep it in their head.
- ASRAnnual Security Report, due within 10 business days of your membership anniversary
- 24hIncident reporting window starts the moment an incident is logged
- 14 daysCSO / SO change notifications, with the letter and training evidence
- RegistersTraining, clearance (DSAP), travel and foreign-contact reminders
Defence Security Register export
Keep your registers in one place and export them in the layout of Defence's Security Register workbook.
Microsoft 365Google Workspace
Essential Eight ML2, ready for ASD Essentials
Track all eight strategies at Maturity Level 2 with evidence. Controls are mapped to ASD Essentials for when Defence moves.
↳ ASD guidance [4][7]A seat for your IT provider
Invite your MSP to upload Essential Eight evidence directly, without sharing logins or emailing screenshots.
Transparent SME pricing
Published plans sized for 1–50 staff, from about $199/month (AUD ex GST, indicative). No sales call to find out what it costs.
Australian-hosted, no classified data
Designed to run on Australian infrastructure and for OFFICIAL information only. Nothing classified, by design.
Every checklist item linked to its official source
No "trust us". Each requirement shows the Defence or ASD document it comes from, such as the DSPF control, the member factsheet or the cyber page, with a link straight to it. When the source changes, you'll see what changed.
DSPF 16.1Member requirements factsheetCyber & assuranceE8 maturity model
Who it's for
Made for the businesses that make up the supply chain.
SME subcontractors
A prime or a tender says you need DISP Entry, and you have under 50 staff and no security team.
Existing members
You're in, but the Annual Security Report and full Essential Eight ML2 take more time than you have.
MSPs & IT providers
You look after several defence-industry clients and want one place to deliver and prove their cyber controls.
Security consultants
You want a structured tool to run DISP engagements on, with reports your clients can keep using after you're done.
Plans for every stage of DISP.
Published up front, no sales call needed to find out what it costs. All prices are in Australian dollars and exclude GST.
Standing
Self-serve for Entry-level SMEs, 1–25 staff
$199/monthAbout $199 · AUD ex GST
- Sourced DISP checklist and policy templates
- Registers, clocks and reminders
- E8 ML2 tracker and ASR pack
- Security Register export and 1 IT-provider seat
Standing Plus
Guided, for members who want a second pair of eyes
From $690/month$690–$990 · AUD ex GST
- Everything in Standing
- Quarterly review call with your SO
- ASR review before your CSO declares
- Incident and change help desk
Application Sprint
Done-with-you, for a contract or tender deadline
From $12,000$12k–$19k one-off · AUD ex GST
- Gap analysis and policy pack
- Cyber questionnaire and interview prep
- 12 months of Standing Plus
Partner
For MSPs and consultants with several defence clients
Talk to usWholesale or referral · per client
- Multi-client console
- White-label reports
- Referral or wholesale terms
Founding customers · first 20
Founding pricing locked in for your first two years, in exchange for a case study. Open to our first 20 customers on any plan.
Ask about a founding placeIndicative early-access pricing in Australian dollars, excluding GST (GST is added where it applies). Ranges depend on your size, DISP level and how much help you need; Application Sprint is quoted as a fixed fee before you start. Plans and inclusions are indicative and may change before launch. Services support your own Security Officer and don't replace them: the DSPF requires the SO to be a staff member of your business [8]. No plan guarantees that Defence will grant or keep a membership.
FAQ
Straight answers.
Something we haven't covered? Ask when you join early access.
Is Secure Standing endorsed by Defence?
No. Secure Standing is an independent product from One Shot Ventures Pty Ltd. It isn't affiliated with or endorsed by the Department of Defence, and using it doesn't guarantee a DISP membership decision. We refer to DISP, the DSPF and ASD frameworks by name so you can check the source yourself.
Is there a fee to join DISP?
No. Defence doesn't charge a membership fee [3]. The real costs are the security controls, clearances and the time it takes to keep everything current, which is what we help with.
Does it replace our Security Officer?
No. Your Chief Security Officer and Security Officer stay accountable, and the SO must be a staff member of your business [8]. Secure Standing gives them a checklist, the clocks and the evidence trail.
Will it store classified information?
No. It's designed for OFFICIAL information only, such as policies, registers and evidence of controls. Don't upload classified material. Hosting is planned on Australian infrastructure.
What about the move from Essential Eight to ASD Essentials?
ASD launched ASD Essentials on 15 October 2026 and says organisations should keep meeting their current obligations until regulators change them [4][9]. For DISP that still means Essential Eight ML2 for now. We track ML2 today and map it forward.
We use Google Workspace, not Microsoft 365. Does that matter?
No. Register exports and evidence collection are being built to work with either suite, without Power Platform.
When can we start?
Secure Standing is in early access. Join the list and we'll be in touch as places open. Indicative pricing is on this page, and the first 20 customers can lock in founding pricing for two years in exchange for a case study.
Early access
Be first in good standing.
We're opening Secure Standing to a small group of Australian defence-industry SMEs, MSPs and consultants first. Tell us where you're at and help shape the product and its pricing.