DISP onboarding: your first 90 days as a new member
6 min read
New DISP members face a steep learning curve. The first 90 days set the tone for whether cyber compliance becomes sustainable or a recurring scramble.
Days 1–30: Understand your obligations
- Confirm your DISP membership level and associated cyber requirements
- Identify who owns cyber security reporting internally
- Conduct a baseline assessment against the DISP Cyber Security Framework
Days 31–60: Close critical gaps
- Prioritise controls with the shortest remediation timelines
- Establish incident reporting procedures aligned with DISP timeframes
- Document personnel security requirements for cleared staff
Days 61–90: Build the rhythm
- Schedule quarterly self-assessments
- Integrate DISP requirements into existing Essential Eight tracking where possible
- Brief leadership on ongoing obligations, not just onboarding tasks
DISP membership is a continuous program. The organisations that treat it that way from day one avoid costly remediation later.
For the onshore Essential Eight record defence suppliers keep beside DISP, see Essential Eight for DISP.