Defence industry, national security and business security are all intertwined. As cyber-attacks, espionage and foreign interference accelerate, Defence and defence industry must work together to address the risk of serious harm to our sovereignty, values and national interest.
Nuclear-powered submarines and their associated technologies will require enhanced security controls above those already applied to defence industry and the naval shipbuilding and sustainment enterprise. This is fundamental to delivering the integrated collective industrial base and workforce envisaged for AUKUS.
Australia’s nuclear-powered submarine program represents the most significant industrial and technical endeavour in Australian history. Australian industry will be required to become ‘AUKUS ready’ by meeting the following security and data requirements needed to participate in the trilateral nuclear-powered submarine program.
Get ready to be part of Australia’s nuclear-powered submarine program.
Defence Industry Security Program (DISP)
Membership of the Defence Industry Security Program (DISP) is a core requirement for industry seeking to work with Defence. DISP provides the framework for implementing appropriate security governance, personnel vetting, physical protections and cyber controls aligned to the Defence Security Principles Framework and informed by the Australian Government’s Protective Security Policy Framework. Achieving and maintaining the appropriate DISP level demonstrates that a business can be trusted to handle Defence information and operate securely within Defence and AUKUS supply chains.
AUKUS licence-free environment
The AUKUS licence-free environment introduces a streamlined mechanism for sharing controlled Defence goods and technology between Australia, the United States and the United Kingdom. From 1 September 2024, eligible Australian businesses can operate under an exemption rather than applying for individual export permits, reducing approval timeframes and compliance burden.
For Australian businesses seeking to participate in AUKUS opportunities, including Australia's nuclear-powered submarine program, registration in the licence-free environment is an important step towards becoming "AUKUS ready".
To access the licence-free environment, organisations must register as an AUKUS Authorised User and an Australian Authorized User through the My Australian Defence Exports (MADE) Portal(Opens in a new tab/window). This provides access to Australian licence-free environment exemptions and supports the transfer of eligible controlled goods, technology and services between AUKUS partners.
Registration, pre-notification activities and licence-free environment applications are managed through the My Australian Defence Exports (MADE) Portal. Organisations will require a Defence Export Controls Client Registration Number (DCRN) before applying.
Australian Signals Directorate and Australian Cyber Security Centre
Industry is expected to align with cyber security guidance issued by the Australian Signals Directorate (ASD) and the Australian Cyber Security Centre (ACSC). This includes implementing controls from the Information Security Manual and maintaining effective cyber security documentation, such as system security plans and incident response arrangements. Strong cyber governance, supported by ASD and ACSC guidance, is critical to ensuring systems remain secure in a rapidly evolving threat environment.
Guidelines to Counter Foreign Interference
Businesses and academic institutions should also consider the Guidelines to Counter Foreign Interference in the Australian University Sector. These guidelines support organisations to identify and mitigate risks associated with foreign interference, and strengthen governance, due diligence and research security practices where sensitive technologies and international partnerships are involved.