FREE TOOL · 2 MINUTES
How ready are you for the Essential Eight?
Rate your business across the ACSC's eight mitigation strategies and get an instant maturity score, your weakest controls, and a prioritised plan — the same framework insurers and auditors now expect.
0/8 answered
CONTROL 1
Application control
Do you control which applications can run on staff devices?
CONTROL 2
Patch applications
Are apps (browsers, Office, PDF, etc.) patched within days of a fix?
CONTROL 3
Configure Office macros
Are Microsoft Office macros blocked or restricted to vetted ones?
CONTROL 4
User application hardening
Is risky web content (Flash, ads, Java, unneeded features) blocked?
CONTROL 5
Restrict admin privileges
Are admin rights limited, reviewed, and separated from daily accounts?
CONTROL 6
Patch operating systems
Are operating systems patched within days and unsupported OSes removed?
CONTROL 7
Multi-factor authentication
Is MFA enforced on email, remote access and important systems?
CONTROL 8
Regular backups
Are backups automated, kept offline/immutable, and restore-tested?