Mon – Fri: 08:00 – 18:00 02 8883 3377
Client support portal

Essential Eight

From assessment to maturity, step by step.

An assessment shows you where the gaps are. Our uplift program closes them. We implement the Essential Eight controls in planned phases, test each change with your people so work isn't disrupted, and keep the evidence that proves you've reached your target maturity level and stayed there.

What's included

Essential Eight Uplift Program

  • A phased plan

    Controls rolled out in a sensible order, starting with the changes that cut the most risk.

  • Changes managed with your team

    Pilot groups, clear communication and a rollback plan for every change, so the business keeps running.

  • Application control and hardening

    Allowlisting, macro restrictions and browser hardening configured and tuned to how you work.

  • Privileges and MFA

    Admin rights removed from everyday accounts and phishing-resistant MFA rolled out where it matters most.

  • Patching and backups to standard

    Patch timeframes and backup protections brought into line with your target maturity level.

  • Evidence and progress reports

    Monthly progress against each strategy, and an evidence pack ready for auditors, insurers and funders.

The outcome

What changes for you.

  • Target maturity reached and proven
  • Changes made without disruption
  • Progress your board can track
  • Evidence on hand when it's asked for

FAQ

Common questions.

Something else on your mind? Call us and talk to an engineer, not a salesperson.

02 8883 3377
Which maturity level should we aim for?

Maturity Level One is a sensible first goal for most organisations, and Level Two suits those holding sensitive data or facing a higher threat. We'll recommend a target based on your risk, obligations and budget.

How long does uplift take?

It depends on where you start and where you're heading. Reaching Maturity Level One often takes a few months; Level Two usually takes longer, because controls like application control need careful tuning.

Will the changes disrupt our staff?

We test every change with a pilot group first, tell people before it reaches them and keep a rollback plan ready. Most staff notice little beyond being asked to use MFA more often.

Security review

Let's talk about your IT and security.

Our security review assesses your environment against the Essential Eight and best practice, ranks the biggest risks and gives you a practical, costed plan to fix them, in plain English.