Your membership is on the line. Build your ML2 evidence before your next assessment.
Defence responds to DISP non-compliance with a scalable approach that can escalate to downgrading, suspending or terminating membership. Where a contract requires DISP membership, losing it puts that work at risk. NodeZero provides attack-based evidence of whether your technical controls hold, mapped to each Essential Eight strategy.
Your specific challenges
The scope expanded
DISP cyber assessments against the Essential Eight's top four strategies concluded on 15 November 2025. Members must now achieve and maintain all eight strategies at ML2 across the corporate network used to correspond with Defence.
A self-attestation needs evidence behind it
The Annual Security Report is a self-attestation, and DISP's audit team selects members for Ongoing Suitability Assessments and deep dive audits on a risk basis. Attack-based test results show what happens when someone actually tries to exploit your environment.
Compliance drifts faster than you think
You could be ML2-compliant today and non-compliant within weeks. Staff changes, configuration drift, and new vulnerabilities create gaps between assessments.
Built for your situation
Baseline your ML2 gaps
Run NodeZero across your environment and see which Essential Eight technical controls an attacker could get past — not a checklist, but proof of what is exploitable.
Prove your fixes actually worked
Quick Verify re-tests specific findings after remediation. Before/after evidence shows measurable improvement — the kind of evidence that supports your assessment.
Evidence mapped to ML2 strategies
NodeZero reports map findings to Essential Eight strategies. Include them as supporting evidence alongside your policy documentation and process records.
See your ML2 gaps before your assessor does
See where NodeZero produces evidence across all eight Essential Eight strategies