DISP Membership Levels Explained: Entry, Level 1, 2, and 3

Most businesses that come to us about DISP have already worked out they need to join. What trips people up is the levels — Entry, Level 1, Level 2, and Level 3 aren't a simple ladder you climb one rung at a time. Each level unlocks access to a different tier of defence work, and jumping straight to the level a tender actually requires can save months.

Here's what each level covers in practice, and how to work out which one your business needs.

DISP Entry: The Starting Point for Most Suppliers

Entry level is where almost every new DISP member starts. It requires the business to appoint a Security Officer, complete a security plan, and meet baseline governance requirements. There's no requirement yet for personnel security clearances at this level — it's mainly about having the right structure and documentation in place.

Entry level suits businesses bidding on contracts that require DISP membership as a prerequisite but don't involve handling classified information directly — think general suppliers, subcontractors on base-level infrastructure work, or companies early in building a defence-sector track record.

Level 1: Access to Classified Information

Level 1 is where things get more substantial. Personnel who need access to classified information must hold an appropriate security clearance, and the business needs stronger governance around how that information is handled, stored, and transmitted.

If your tender documentation mentions handling PROTECTED or higher classified material, Entry level won't cut it — you'll need Level 1 membership before you can be considered.

Level 2 and Level 3: Higher Classification, Higher Scrutiny

Level 2 and Level 3 apply to businesses working with SECRET and TOP SECRET material respectively. These levels bring significantly more rigorous requirements around physical security, information systems, and personnel vetting. Very few SMEs need to go this far — it's typically prime contractors and specialised suppliers in sensitive programs.

Jumping to Level 2 or 3 without a genuine business need adds cost and audit burden for no benefit. We generally advise clients to match the level to the actual work in front of them, not the work they hope to win someday.

Common Mistakes We See

• Applying for a higher level than the tender actually requires, adding months to the process

• Underestimating the governance documentation Entry level still requires

• Leaving personnel clearance applications too late — they often take longer than the rest of the DISP application combined

• Not revisiting membership level as the business wins new, higher-classification work

The fix for most of these is straightforward: map the tender requirements first, then work backwards to the DISP level and clearance timeline needed — rather than applying for membership and hoping it lines up.

Frequently Asked Questions

Can a business hold DISP membership at more than one level?

Membership is assessed against the work a business actually does. As you take on higher-classification contracts, your membership level is reassessed and can be upgraded — it's not a fixed one-time classification.

How long does it take to move from Entry to Level 1?

It depends mainly on personnel security clearance processing times, which are outside DISP's control. Governance and documentation changes can usually be made faster than clearances come through, so clearances are typically the bottleneck.

Do all employees need clearances, or just some?

Only personnel who need access to classified information as part of their role require a clearance. Most businesses don't need to clear their entire workforce — just the people directly involved in the classified work.

Ready to Work Out Your Level?

If you're not sure which DISP level a tender actually requires, the fastest way to find out is a readiness assessment against the specific contract you're targeting.