What this helps you decide
Which gaps should be addressed first, and what evidence will demonstrate progress?
When you need it
You need an evidenced baseline and a realistic uplift plan. Assess agreed controls and evidence against the applicable ASD Essential Eight maturity requirements.
Business impact & an example
Having a security tool does not establish a maturity level. The assessment needs evidence of how the relevant practices are applied across the agreed environment.
A question worth asking
Do our day-to-day controls meet the chosen maturity level across the systems in scope?
Examples guide the scope; they are not promised findings.
What’s included & what you receive
Agreed coverage
- Target maturity and environment agreed upfront
- Control interviews and evidence review
- Agreed technical validation
- Practical uplift priorities
- Review against the Australian Signals Directorate’s (ASD) Essential Eight Maturity Model, Maturity Levels One to Three
Your deliverables
- Control-by-control observations
- Evidence gaps and assessment limitations
- Prioritised maturity uplift plan
- Leadership summary
Exclusions & limitations
Assessment does not certify compliance with every regulation or establish that an organisation is immune to attack.
References to standards are not claims of certification, accreditation or endorsement.