Essential Eight checklist.
The ASD's Essential Eight is the baseline most NZ and Australian insurers, auditors and boards now expect. A plain-English checklist to self-rate where you stand against all eight.
What you get.
6 areasApplication control
Allowlisting so only approved executables and scripts can run.
Patch applications & OS
Critical patches inside 48 hours on internet-facing systems.
Office macros & hardening
Block untrusted macros; harden browsers and Office.
Restrict admin privileges
Least privilege, separated admin accounts, regular revalidation.
Multi-factor authentication
MFA on email, remote access and all internet-facing services.
Regular, tested backups
Offline or immutable backups with proven restores.
A general, plain-English resource offered as-is, not a substitute for tailored professional advice. We recommend reviewing it against your own environment.
Want to know your
Essential Eight maturity?
We assess your environment against all eight and give you a prioritised plan to reach Maturity Level One and beyond.
