Cyber security and Essential Eight assessments
We assess your business against the Australian Cyber Security Centre’s Essential Eight, show you plainly where the risks are, then help you close the gaps and stay protected.
Essential Eight strategies
The Essential Eight
The Australian Cyber Security Centre’s eight baseline strategies. We assess each one against maturity levels one to three, then show you which gaps to close first. Choose a strategy to see what it does.
Application control
Stops attacks before they start: only programs you have approved are allowed to run.
Patch applications
Stops attacks before they start: security updates for browsers, Office, PDF readers and other applications are applied quickly.
Configure Microsoft Office macro settings
Stops attacks before they start: macros from the internet are blocked and only trusted macros can run.
User application hardening
Stops attacks before they start: browsers and Office are locked down so risky web content and features can’t be used against you.
Restrict administrative privileges
Limits the damage if something gets in: admin access is kept to the few people who need it, and reviewed regularly.
Patch operating systems
Limits the damage if something gets in: Windows and other operating systems are patched promptly, and unsupported versions are replaced.
Multi-factor authentication
Limits the damage if a password is stolen: a second check protects remote access, email and important systems.
Regular backups
Gets you running again: important data, software and settings are backed up, kept safe and test-restored.
The rings show maturity levels: ML1 (inner) to ML3 (outer, dashed).
What’s included
- Essential Eight evaluation
- Your maturity measured against the eight mitigation strategies recommended by the Australian Cyber Security Centre.
- Risk and gap analysis
- A plain-language report on where you are exposed and which risks matter most.
- Security roadmap
- Prioritised actions to reach the maturity level and compliance standards you need.
- Control deployment
- Recommended controls implemented alongside your IT team, with minimal disruption.
- Staff training
- Practical awareness training so good security habits become part of daily work.
- Monitoring and review
- Continuous monitoring and periodic reviews that adapt as new threats emerge.
Free cyber security health check
An Essential Eight assessment that shows where your defences have gaps and what to fix first.
Get a free health checkHow we work
Step 1: Initial consultation
Understand the security needs and risk profile of your organisation.
Step 2: Assessment and evaluation
Review your current security measures and map them against frameworks like the Essential Eight.
Step 3: Risk and gap analysis
Identify specific vulnerabilities and report clearly on each risk area.
Step 4: Strategic action plan
Build a tailored roadmap with prioritised actions to meet compliance and security standards.
Step 5: Control deployment and training
Implement the recommended controls with your IT team and train staff for lasting practice.
Step 6: Monitoring and ongoing support
Set up continuous monitoring and periodic reviews to keep pace with new threats.
Common questions
Why is cyber security critical for our organisation?
It reduces your exposure to risk, protects sensitive data and keeps your business running if an attack happens.
What is the Essential Eight?
The Essential Eight is a set of eight mitigation strategies recommended by the Australian Cyber Security Centre to make it much harder for attackers to compromise your systems.
Will implementation disrupt our operations?
We work with your existing infrastructure and schedule changes carefully, and we train your staff so the transition is smooth.
How does this benefit us long term?
Stronger resilience, less downtime and ongoing compliance, which improves both your security and your operational efficiency.
Is cyber security a one-time project?
No. Threats change constantly, so security needs continuous monitoring and regular updates. We can provide that support.
Can this work with the security tools we already use?
Yes. Our approach is compatible with most existing security tools, so we build on what you have rather than replacing it.
Start with a free first consultation
Book a free, no-obligation video chat. We’ll listen to where you are, tell you plainly what we’d do, and only then talk about cost.