Essential Eight
Know exactly where you stand against the Essential Eight.
Funders, insurers and larger customers want to know how you measure up to ASD's Essential Eight. Our assessment tests each of the eight strategies against the current maturity model using evidence from your systems, not just a questionnaire, and gives you a clear maturity rating and a prioritised, costed plan to lift it.
What's included
Essential Eight Assessment
-
Evidence-based testing
We check settings, logs and reports in your environment, not just what your policies say should happen.
-
All eight strategies
Application control, patching, macros, application hardening, admin privileges, OS patching, MFA and backups, each rated.
-
Maturity level for each control
A rating from Maturity Level Zero to Three for every strategy, so you can see exactly where the gaps are.
-
A prioritised roadmap
Fixes ranked by risk reduction and effort, with indicative costs and timeframes.
-
A report for your board
A plain-English summary for leadership, alongside the technical detail your IT team needs.
-
Advice on your target
Help choosing the right target maturity level for your risk profile, obligations and budget.
The outcome
What changes for you.
- A clear, defensible maturity rating
- Answers ready for insurers and funders
- A plan your board can approve
- Gaps fixed in the right order
FAQ
Common questions.
Something else on your mind? Call us and talk to an engineer, not a salesperson.
02 8883 3377Is the Essential Eight mandatory for us?
It's mandatory for many Australian Government entities and widely expected elsewhere. Insurers, funders and larger customers increasingly ask for your maturity level, so knowing it puts you in control of the conversation.
How long does an assessment take?
Most assessments take a few weeks from kick-off to report, depending on the size of your environment and how quickly we can get access to your systems.
Isn't ASD replacing the Essential Eight?
ASD has consulted on evolving it into a broader Essentials series, but the current maturity model still applies. The controls we assess are the foundation of what comes next, and we'll help you transition when new guidance is published.
Security review
Let's talk about your IT and security.
Our security review assesses your environment against the Essential Eight and best practice, ranks the biggest risks and gives you a practical, costed plan to fix them, in plain English.