ASD Essential Eight Maturity Model

The Essential Eight.
You've heard of it.
But are you actually
implementing it?

Most Australian organisations sit at Maturity Level 1. The ACSC recommends Level 2 as a baseline. Find out where you stand — in minutes.

📥 Download Free Checklist See the reality check →
8 Controls to Assess
ML0–3 Maturity Levels
48h Patch SLA at ML2
Free Self-Assessment

// Reality Check

Quick maturity check — answer honestly

🛡️
E8-1 Application Control
Do you know every app running on your endpoints?
"Can you list every executable allowed to run — and prove nothing else can?"
🔧
E8-2 Patch Applications
Are you patching within 48 hours for internet-facing services?
"How many days does it actually take from CVE published to patch deployed?"
🔐
E8-7 Multi-Factor Authentication
Is MFA enabled for ALL remote access — not just some?
"Can you name the services that still use password-only authentication?"
👤
E8-5 Restrict Admin Privileges
When did you last audit who has domain admin?
"Is your admin account count growing every time someone needs elevated access?"
💾
E8-8 Regular Backups
When did you last test restoring from backup?
"Not just backing up — actually restoring. With a documented test result?"
⚙️
E8-6 Patch Operating Systems
Are your OS patches applied within two weeks?
"How many endpoints in your fleet are running an unpatched OS right now?"
Most Australian organisations are at ML1. The ACSC recommends ML2 as a baseline — and government supply chains are increasingly requiring it. Our free checklist helps you identify exactly where you are and what it takes to move up.
Where is your organisation?
ML0
ML1 ← most
ML2 ← target
ML3

// Free Download

Essential Eight
Self-Assessment
Checklist

A practical, no-fluff checklist covering all eight controls across ML0 to ML3. Built for Australian IT teams and security managers who need a clear picture of their current posture — fast.

  • All 8 Essential Eight controls mapped to ML0–ML3 criteria
  • Plain-English questions your team can actually answer
  • Gap identification — see exactly what ML2 requires
  • Evidence checklist for each control
  • Aligned to the ACSC November 2023 Maturity Model
  • Works for Windows, Linux and macOS environments
// Get the checklist
Free Self-Assessment
Instant download — no sales call required
8 Controls
4 ML Levels
Free Always

No spam. Unsubscribe anytime. 🇦🇺 Australian owned.

✅

Your checklist is on its way!

Check your inbox at

Questions? admin@cyberharmony.au