Patch applications
Keep business apps (browsers, Office, PDF readers) updated so known holes are closed fast.
The eight strategies
Eight practical controls that, together, block the most common ways attackers get in.
Patch operating systems
Keep Windows/macOS and any internet-facing systems current with security updates.
Multi-factor authentication
A second factor on email, banking and key systems stops the vast majority of automated attacks.
Restrict administrative privileges
Limit admin rights to who genuinely needs them, and review access regularly.
Application control
Only allow approved, trusted software to run, blocking malware by default.
Restrict Microsoft Office macros
Disable macros except where they're truly needed, shutting down a common malware entry point.
User application hardening
Lock down risky features such as web ads, Java and unneeded browser add-ons.
Regular backups
Keep tested, isolated backups so you can recover quickly from ransomware or data loss.
How mature are you? (ML0–ML3)
Maturity is assessed strategy-by-strategy, and the levels are cumulative — each builds on the one before.
Maturity Level 0
Gaps that leave you exposed. The honest starting point most businesses are at before they begin.
Maturity Level 1
Baseline protection against opportunistic attackers using off-the-shelf tools. The minimum every business should reach.
Maturity Level 2
Stronger controls that defend against more capable, deliberately targeted attackers.
Maturity Level 3
Robust defence against adaptive, sophisticated adversaries.
Heads up: the ASD 'Essentials' series is coming
The ASD has signalled that the Essential Eight will gradually transition to a broader new 'Essentials' series over roughly the next couple of years. The good news: the Essential Eight remains the live, supported baseline today, and any alignment work you do now maps directly across — so it's not wasted effort.
How I help you align
Alignment assessment
A clear picture of where you sit across all eight strategies.
Plain-English gap report
Prioritised, jargon-free, with the fixes that reduce the most risk first.
Staged uplift roadmap
A realistic plan that fixes what matters most, in the right order.
Hands-on implementation
I can do the work with you, not just hand over a checklist.
// NOT SURE WHERE YOU STAND?
Start with the 2-minute Risk Check
See your exposure instantly, then let's talk about aligning to the Essential Eight.