Why this matters
The Essential Eight is a set of baseline cyber security strategies published by the Australian Signals Directorate’s Australian Cyber Security Centre (ACSC). It is widely used by Australian businesses and government agencies, and increasingly expected by insurers, clients and tenders.
What you'll need
- No technical knowledge needed
Step-by-step instructions
Step 1
Understand the goal
The Essential Eight focuses on making it much harder for attackers to get in, limiting what they can do if they do, and making sure you can recover.
Step 2
Learn the eight strategies
The strategies are:
- Application control: only approved programs can run
- Patch applications: fix security flaws in apps quickly
- Configure Microsoft Office macro settings: block risky macros
- User application hardening: lock down browsers and apps
- Restrict administrative privileges: limit admin access
- Patch operating systems: keep Windows and other systems updated
- Multi-factor authentication: require a second check to sign in
- Regular backups: back up and test restoring important data
Step 3
Understand maturity levels
Each strategy is measured from Maturity Level Zero to Three. Level One protects against common, opportunistic attacks; higher levels defend against more capable attackers.
Step 4
Pick a target level
Most small and medium businesses start by aiming for Maturity Level One across all eight strategies, then move towards Level Two.
Step 5
Work through the strategies together
The strategies are designed to work as a set. Strong MFA with no backups, for example, still leaves you exposed.
Frequently asked questions
Is the Essential Eight mandatory?
It is mandatory for many Australian Government entities. For private businesses it is voluntary but increasingly requested by insurers, government clients and larger customers.
Summary
The Essential Eight gives Australian businesses a clear, practical roadmap for cyber security. Starting with Maturity Level One is achievable for most organisations.
Still Need Help?
Some IT problems are easier to solve with a professional. If you've followed the guide and still need help, the Omnicron team can assist.