---
title: "Defence and Regulated Suppliers | SecBoost"
source: "https://secboost.com/solutions/defence-regulated-suppliers/"
---

Defence and regulated suppliers

# Prepare security evidence for customers, procurement teams and assessors.

SecBoost gives SaaS vendors, cloud providers and defence contractors a structured way to prepare Essential Eight reports, ISM documentation and IRAP assessment records.

## Customer assurance

Keep reports, implementation detail and supporting evidence ready when a government or regulated customer asks for it.

## DISP and Essential Eight

Track target maturity, control gaps and evidence in a format that supports governance and uplift conversations.

## Pathway to IRAP

Move from reporting and documentation into assessor collaboration when the engagement requires it, without sending confidential evidence through email threads.

Why and how

## Prepare evidence for DISP, procurement and customer reviews.

SecBoost gives suppliers a place to organise the evidence, reports and documentation needed for DISP, customer assurance and later IRAP work.

### DISP preparation

Defence suppliers need clear progress towards Essential Eight ML2 and evidence that can withstand review.

### Customer assurance

Government and regulated customers increasingly ask for maturity, evidence and documentation before deeper assessment work begins.

### Reusable assessment material

The same project record can support customer questions, governance updates, E8 reporting and IRAP preparation.

### Secure Australian hosting

SecBoost-hosted single-tenant environments run inside SecBoost AWS Australia PROTECTED tenancy for teams handling sensitive assessment material.

How it works

## A workflow from source material to usable outputs.

 01 

### Start with the required maturity target

For DISP, that usually means organising work around the full Essential Eight at Maturity Level 2.

 02 

### Capture system and business context

Record the corporate systems, stakeholders, assets and data flows used to correspond with Defence or regulated customers.

 03 

### Attach evidence and record gaps

Keep evidence, blockers, alternate controls and maturity gaps close to the control record.

 04 

### Return controls for more information

In Standard, assessors can move a control back to editing when they need clarification, keeping the request and response inside SecBoost.

 05 

### Finalise the assessment package

SecBoost produces the artefacts needed for governance, customer assurance and assessment review.

 Completed CCM (Cloud Controls Matrix) 

 OSCAL System Security Plan and Assessment Results exports 

 Completed Documentation Suite 

 Updated registers 

## Keep assurance records current with less manual copying.

Use your own AI agent or integration through the API to attach configuration exports, maintain implementation notes and generate documents. Bring evidence from your delivery tools into SecBoost as your system changes.

 [Explore the API and integrations](<https://secboost.com/api/>) 

## Starter or Standard depends on assessor involvement.

Use Starter when the job is managing stakeholder contacts, reports and a documentation suite. Use Standard when an assessor, consultant or internal reviewer needs to log in, complete assessment steps and finalise OSCAL and CCM outputs.

### Starter

$7,000 / year

AUD, excluding GST

For small teams preparing Essential Eight reports and ISM documentation for customer or assessment requirements.

-    One organisation · one system 
-    Five users · 5 GB storage 
-    Documents, reports and evidence 

### All Starter inclusions

-    One organisation and one assessed system 
-    Multiple projects for that assessed system 
-    20+ plans, policies, standards and reports 
-    Full ISM support, updated for June 2026 
-    Wizard-based project creation 
-    SSP Annex and Control Matrix Excel import 
-    Essential Eight dashboard, index and report 
-    Evidence attachments for controls 
-    Contacts and stakeholder records 
-    10+ registers including hardware, training and evidence 
-    Asset library for logos, diagrams and contact lists 
-    Passkey and TOTP MFA 
-    Five users and 5 GB storage 
-    Business hours email support 
-    One hour onboarding and training 
-    SecBoost-hosted single-tenant AWS Australia PROTECTED deployment 

 [Discuss Starter](<https://secboost.com/contact/>)  [Explore the product demo](<https://secboost.com/demo/>) 

### Standard

$12,000 / year

AUD, excluding GST

 Ideal for this use case 

Best when an assessor needs to log in and perform assessment work inside SecBoost.

-    Up to two assessed systems 
-    20 users · 20 GB storage 
-    Assessor review and final exports 

### All Standard inclusions

-    Everything in Starter 
-    Assessor-managed control workflow with assessment steps 
-    Assessors can perform assessment work inside SecBoost 
-    Assessors can return controls to editing when more information is needed 
-    Customisable roles and permissions 
-    Completed CCM and OSCAL SSP and Assessment Results exports 
-    Up to two assessed systems, each with multiple projects 
-    20 users and 20 GB storage 
-    AI-generated implementation suggestions 
-    Optional Jira integration 
-    Business hours priority phone support 
-    SecBoost-hosted single-tenant AWS Australia PROTECTED deployment 

 [Discuss Standard](<https://secboost.com/contact/>)  [Explore the product demo](<https://secboost.com/demo/>) 

### Enterprise

Contact us

Best for multiple organisations, multiple systems, delivery teams and portfolio assurance.

-    Multiple organisations and systems 
-    Unlimited users · configurable storage 
-    Teams, tasks and SSO 

### All Enterprise inclusions

-    Everything in Standard 
-    Multiple organisations, assessed systems and projects 
-    Teams and task assignment 
-    Task reminders, escalation and reporting 
-    Custom workflow gates 
-    Portfolio assessment workflow with completed CCM and OSCAL exports 
-    SSO with just-in-time provisioning 
-    Custom domain 
-    On-premises deployment option 
-    On-premises options for SECRET and TOP SECRET environments 
-    Unlimited users 
-    Configurable storage 
-    Extended support, custom training and quarterly reviews 

 [Discuss Enterprise](<https://secboost.com/contact/>)  [Explore the product demo](<https://secboost.com/demo/>) 

 [Talk to SecBoost](<https://secboost.com/contact/>)  [Compare tiers](<https://secboost.com/pricing/>)  [View IRAP workflow](<https://secboost.com/irap/>) 

FAQ

## Defence supplier questions

Common questions from suppliers preparing Essential Eight, DISP and customer assurance material.

### How does SecBoost help Defence suppliers with DISP cyber assurance?

SecBoost helps suppliers organise Essential Eight maturity work, implementation evidence, blockers, residual risk and supporting ISM documentation so they can respond to Defence, customer and assessor assurance requests more consistently.

### Is Starter enough for a Defence supplier?

Starter can suit suppliers that need reports, stakeholder contacts, evidence records and a documentation suite. Standard is a better fit when an assessor, consultant or internal reviewer needs to work inside SecBoost and produce final OSCAL and completed CCM outputs.

### Can SecBoost support a pathway from Essential Eight to IRAP?

Yes. Teams can start with Essential Eight and supporting documentation, then move into assessor collaboration, control evidence review and assessment workflow when the engagement requires it.

### Can suppliers keep customer assurance evidence in SecBoost?

Yes. Evidence can be attached directly to the relevant control so reports, maturity claims and customer assurance conversations remain traceable to supporting records.