If you're looking for a way to assess your organisation's Essential Eight maturity, this is it. The self-assessment gives you real insight into your strengths and weaknesses, and helps you identify exactly where to focus improvement.
It's easy to use and takes just minutes to complete. Once you're done, you'll get a detailed report scoring your organisation on each of the Essential Eight dimensions — enough to build a clear roadmap and keep your organisation on track to meet its objectives.
Don't wait to find out where you stand. Start your Essential Eight self-assessment today and use the results to plan improvements.
Essential Eight Self-Assessment: What It Covers
The Essential Eight is the Australian Cyber Security Centre's baseline set of mitigation strategies, covering patching, application control, macro settings, restricting admin privileges, multi-factor authentication, and backups. Most Australian organisations are expected to reach at least Maturity Level One, and many government-adjacent contracts now require it. You can read the full framework on the Australian Cyber Security Centre website.
Our assessment maps your current controls against all eight strategies using the ACSC's official maturity model, so the result is something you can hand to an auditor or a board. If you need to formalise the result into a certified management system, our compliance and audit team can take you from self-assessment through to ISO 27001 certification.
Free Essential Eight Assessment for Melbourne and Australian Businesses
ITS247 offers a free Essential Eight self-assessment for organisations across Melbourne and Australia. It is the quickest way to see your current maturity level before committing to a formal Essential Eight assessment or IT audit. If your results show gaps, our cybersecurity and compliance and audit teams can help you close them.
New to the framework? Read our guide to the Essential Eight, its eight strategies and maturity levels.
Essential Eight Assessment: FAQs
Is there a free Essential Eight assessment in Melbourne?
Yes. ITS247 offers a free Essential Eight self-assessment that takes minutes online. It scores your organisation against the eight ACSC mitigation strategies and gives you a baseline to work from.
What is an Essential Eight assessment?
An Essential Eight assessment measures how well your organisation has implemented the eight ACSC mitigation strategies, and rates each at a maturity level from zero to three, so you know where to improve first.
Can ITS247 do a full Essential Eight assessment for my business?
Yes. After the self-assessment, ITS247 can carry out a full Essential Eight assessment and IT audit with evidence checks and a remediation plan. See our compliance and audit service.
How long does the Essential Eight self-assessment take?
It takes just minutes to complete. You then receive a report scoring your organisation on each of the Essential Eight strategies.
What are the Essential Eight strategies?
The Essential Eight are the Australian Cyber Security Centre baseline mitigation strategies: application control, patching applications, configuring Microsoft Office macro settings, user application hardening, restricting administrative privileges, patching operating systems, multi-factor authentication and regular backups.
What Essential Eight maturity level should my business aim for?
Most organisations aim first for Maturity Level One across all eight strategies, then raise the level for the systems that hold their most sensitive data. The self-assessment shows your current level for each strategy.