ASD Essential 8 Services

Turning Essential 8 Compliance Into Real Cyber Resilience

The Australian Signals Directorate (ASD) has developed prioritised mitigation strategies to help organisations protect themselves against various cyberthreats. The most effective of these mitigation strategies are the Essential Eight (E8).

  • Application Control

  • Patch Applications

  • Configure Microsoft Office Macro Settings

  • User Application Hardening

  • Restrict Administrative Privileges

  • Patch Operating Systems

  • Multi-Factor Authentication (MFA)

  • Regular Backups

Alongside the E8 mitigation strategies are a series of maturity levels that can be used to guide an organisation’s implementation of the E8.

The maturity levels also provide a standard against which an organisation can be measured to ensure they have an appropriate baseline of cyber security controls.

The concept of Essential 8 is relatively straightforward however, implementation of the controls, drafting of the associated documentation and collection of audit trail evidence can become a complex undertaking leading to unexpected gaps that can be a barrier to compliance.

Two professionals reviewing ASD Essential Eight Service options on a laptop
Two professionals reviewing Essential Eight readiness requirements and assessment information on a laptop.

Essential 8 Readiness Service

Kaon Security’s E8 readiness service is designed as a precursor to a formal E8 assessment, the collaborative workshop led approach removes any ambiguity about the E8 requirements and lays the foundation for a successful E8 assessment.

The readiness review is based on information collected during a series of workshops, and any supplementary evidence provided by the organisation to document the current state of their cyber security controls against the appropriate maturity level.

Our senior consultant team work with you to identify gaps and will provide actionable recommendations to enhance overall compliance and maturity.

Benefits Of An Essential 8 Readiness Review

  • Identify any gaps to be closed in advance of a full assessment

  • Reduce the time and effort to complete a full assessment

  • Improve the likelihood of a successful assessment result in line with the organisation’s expectations

Professionals reviewing security information on laptops during an Essential Eight readiness review.

Deliverables

  • 3 workshops

  • Review existing documentation and assess alignment with ASD E8 MLx

  • Perform a gap analysis

  • Draft a Readiness Review Report

Formal Essential 8 Assessment

An Essential 8 assessment is a comprehensive technical examination of your security controls and documentation.

The assessment is performed in accordance with the published ASD maturity levels assessment guidance and is a binary exercise to clearly identify exactly where the organisation does or does not meet the requirements of the ASD E8.

Our senior consultant team work with you to collect evidence and our technical consultant team will perform the technical verification steps to comprehensively prove compliance.

Two professionals reviewing Essential Eight controls and compliance requirements at a workstation.
Team reviewing assessment information and security controls during a formal Essential Eight assessment workshop.

Benefits Of A Formal Essential 8 Assessment

Technical verification of the effectiveness of the implemented controls

Understand the organisation’s exact compliance status with the E8

Identify areas for improvement before moving to the next maturity level

Deliverables

  • Access to an evidence submission portal for use during the assessment

  • Report on ASD maturity level including results of technical verification

  • Slide deck of results for internal presentation

Professional reviewing reports and security metrics from a formal Essential Eight assessment on a laptop.

Contact Us Today

Fill in the form below or call us on +61 3 9913 3248 (VIC), +61 7 3194 3664 (QLD) or +61 2 9098 8206 (NSW)