Skip to main content
Category
Guidance Document
Type
Standard
Access
Open
Status
Active
Created
November 2023
Essential Eight is designed to protect organisations' internet-connected IT networks against cyber threats.

This document describes mitigation strategies, test IDs, control descriptions and test methodologies for assessment against Essential Eight Maturity Level Three.

Main sections:

- Patch applications

- Patch operating systems

- Multi-factor authentication

- Restrict administrative privileges

- Application control

- Restrict Microsoft Office macros

- User application hardening

- Regular backups
Access Example Essential Eight Assessment Test Plan

By accessing this content, you are leaving this website. The Agency takes no responsibility for the accuracy of content on the destination page.