Working with Defence & the Commonwealth.

Winning Defence work is one problem. Being allowed to carry it is another. For Australian SMEs entering or growing in the Defence supply chain, this is the path in the order you'll actually need it — environment, compliance, exchange, then the bid itself. Primes and consortium leads: partnering with ACT Cyber lives here too.

§ 01 · Land · Your Environment

The Defence SME Landing Zone — an environment in a box, built in your tenant.

A fixed-scope build of your own Microsoft 365 and Azure environment, aligned to PROTECTED and delivered with the evidence already written: identity-first access (Entra ID, Conditional Access, PIM), Essential Eight endpoint hardening targeting Maturity Level 2, centralised logging, and the ISMS register kit your security governance will run on.

It's your tenant and your environment from day one — we build it, document it and hand it over. The artefacts produced during the build are the same ones your DISP application and annual security reporting will ask you for, so membership preparation starts as a by-product of the build, not a second project.

Your TenantEssential 8 · ML2 TargetDISP-Ready EvidenceFixed Scope
Customer Owned · Customer Operated Modern professional working environment
§ 02 · Comply · Stay Compliant

Compliance as an operating rhythm.

DISP membership and Essential Eight maturity aren't won once — they're maintained quarterly.

Our Compliance Uplift subscription keeps the obligations moving after the build: quarterly control and register reviews, internal audits, Essential Eight maturity tracking, and the evidence upkeep that DISP annual reporting and customer assurance requests depend on. Offered in three tiers, from quarterly review through to fully operated ISMS — scoped to your obligations.

Everything is delivered on your own SharePoint — your registers, your tenant, your records. If we stop tomorrow, you keep a complete, current ISMS, not an export from someone else's portal.

Essential EightDISP ReportingISMS OperationsSubscription
Sovereign infrastructure at night
Plate I · Sovereign by design
§ 03 · Exchange · Move Material Safely

Exchanging files with the Commonwealth.

Email wasn't built to carry sensitive material — and your customers know it.

Deliverables, technical data and reports move between you, primes and agencies constantly. Two ways to do it properly:

Managed — we run it
  • SecureFTP, our managed file exchange — engineered to the ISM PROTECTED baseline, Australian hosted and operated
  • Onboarding of your staff and external parties, transfer auditing and reporting included
  • Shared responsibility matrix and control documentation for your assessor
Your own — we build it
  • As LiquidFiles authorised resellers, we licence, build and support the same platform in your environment
  • Deployed to the same engineering patterns, owned and operated by you
  • Optional support subscription to keep it patched, monitored and audit-ready
MFTASD-Approved CryptoAudit TrailManaged or Deployed
§ 04 · Team & Bid · Win the Work

Tender rooms, stood up per bid.

Teaming on a Defence bid means sharing sensitive material with partners you don't share an environment with — usually under deadline pressure.

A controlled, time-boxed collaboration workspace for the life of the bid: secure file exchange between teaming partners, access controlled per participant, full audit trail, and a hard teardown date when the bid closes. Accepts material up to OFFICIAL: Sensitive. Stood up when the opportunity lands, decommissioned when it's done — no standing infrastructure to pay for or secure between bids.

Per-BidTime-BoxedHard TeardownAudit Trail
Configured for regulated workloads
Plate II · Configured for regulated workloads
§ 05 · Partnering · For Primes & Consortium Leads

Partner with ACT Cyber.

Commonwealth contracts come with security obligations few industry teams have in-house. Whether you're bidding for the work or meeting the standards after winning it — we're built to lift your team to Commonwealth-ready, fast.

We don't compete with our partners — we specialise in what most industry teams don't have in-house: deep PROTECTED-aligned Microsoft cloud delivery, ISM and Essential Eight uplift, ISMS design and IRAP readiness acceleration. 100% Australian owned, Australian personnel, no FOCI risk — vetting verified under partner pack arrangements. Passes probity without caveats. Sanitised case study snapshots are on the Credentials page; full versions ship in the partner pack.

The partner pack
  • Team CVs formatted for Commonwealth tender submission, vetting status verified
  • Sanitised case studies and one/two-page capability statements
  • Commercial rate card mapped to common Commonwealth panel formats
  • Past performance register and corporate credentials (insurances, ABN, Microsoft Partner ID)
How it works
  • Make contact — opportunity, capability fit, commercial structure
  • A teaming or partnering agreement protects both parties
  • Pack dispatched promptly; referee contacts on request
  • Bid wins or contract lands — we mobilise as scoped, ready from day one
§ 06 · Roadmap

Where this is heading.

On our roadmap: a managed secure desktop enclave — a hardened, Essential Eight-aligned desktop service for Defence-industry teams that need a compliant workspace without building one. Not yet an offer; if it solves a problem you have today, tell us — demand shapes the queue.

Entering the Defence supply chain?

A 30-minute discovery call: where you are, what your contracts will demand, and the order to tackle it in — from someone who's carried environments through Defence authorisation.

Book discovery call →