Defence Industry Security Programme

DISP is the security risk management programme for our industry partners. DISP accreditation ensures you meet NZDF and New Zealand Government security requirements. As part of DISP accreditation, you will need security clearances for your people and a Facility Security Officer to manage the security requirements of your contract with us.

Types of DISP accreditation

There are three main types of DISP accreditation depending on the work you do, where and for how long. If your business needs DISP accreditation, you will need one or more of these:

• Personnel Accreditation – if any of your people need to work with classified information, assets or locations, they will be vetted personally for the right security clearance. Your people include you, your staff and any subcontractors.

• Facility Accreditation – if you will be working with classified information, or assets at your business premises, we will conduct a Security Risk Assessment (SRA) of the premises. You will need to make any physical changes we require, such as installing a safe or a security container, or getting NZDF-standard locks on doors.

• Information Security Accreditation – if you will be using cloud services or your own information system or equipment to develop classified documents, or if you will be hosting NZDF's classified ICT equipment, we will require assurance that those systems and facilities meet the required security standards. For information systems, we will require assurance that appropriate certification and accreditation has been done.

There may be some limited exceptions to the requirement for DISP accreditation, for instance:

• If the work is for a short period, your people may only need to get security clearances.

• If you are tendering for a contract and the tender documents are classified, a limited number of your people may only need to get security clearances and to access the documents at approved locations.

• If you are doing a one-off job at a classified location, for instance a plumbing repair, your people may only need to get a Defence Site Clearance (DSC) and to meet the security requirements for the location such as being signed in and out or escorted while doing the work.

• If your people are embedded into an NZDF unit for the whole of their contract, they may only need to get security clearances.

Applying for DISP accreditation

You can apply for DISP accreditation and security clearances when you have an agreed contract with the NZDF. We need to know exactly what you will be doing first, so that you apply for the right accreditations and clearances.

There is no fee for DISP accreditation or security clearances. But if you need to work with classified information or assets on your own business premises, you may incur costs for any physical changes you need to make to meet the security requirements of your contract. For example, you may need to purchase new locks or provide a secure room or a safe to store classified information. You may also incur costs for any information security certifications and accreditations we require.

When you apply for DISP accreditation you will need to appoint at least one of your people as a Facility Security Officer.

Holding DISP accreditation

Your DISP accreditation needs constant maintenance:

• Your business must return regular self-inspection reports.

• Your business must undergo a regular Security Risk Assessment (SRA) and make any upgrades we require.

• Your people must be able to hold their security clearances and meet the ongoing reporting requirements for their security clearance level.

Facility Security Officer (FSO)

Your Facility Security Officer (FSO) ensures your business and your people meet the security requirements of your contract with us. You must appoint one of your people as your Facility Security Officer and you may need to appoint a Deputy Facility Security Officer, depending on the size of your business.

The Facility Security Officer is the NZDF’s key security contact. They are responsible for putting systems and processes in place to meet the requirements of your DISP accreditation and helping us to manage your compliance.

The role will add some extra responsibilities to the workload of the people you appoint. Find out more about the role in our Facility Security Officer Guide.

Find out more

Get more information about working with the NZDF in the Defence Industry Security Guide.

The NZDF’s security requirements are based on the Protective Security Requirements (PSR). This is a policy framework which outlines the New Zealand Government’s expectations of what government agencies like the NZDF must do to effectively manage personnel, physical and information security. Private sector organisations should consider the Protective Security Requirements as best practice and this site gives you some useful security resources.