Skip to content

Australia

Essential Eight

The Australian Signals Directorate's eight baseline mitigation strategies.

Essential Eight requirements, each mapped to orta controls8

Who it applies to

Australian government bodies and the many companies that adopt it as a baseline.

What it can cost

Lost deals, failed audits and penalties set by your regulator or contract.

Published by
Australian Signals Directorate
Maturity levels
Zero to three
Strategies
Eight

What Essential Eight asks of you

  1. 01Application control
  2. 02Patch applications
  3. 03Office macro settings
  4. 04User application hardening
  5. 05Restrict admin privileges
  6. 06Patch operating systems
  7. 07Multi-factor authentication
  8. 08Regular backups

How orta covers Essential Eight

8 Essential Eight requirements, mapped

Each requirement is linked to orta's common controls, so evidence you already have counts here too.

Checked from your own systems

Host, Kubernetes and AWS checks run on a schedule and mark controls passing or failing, every day.

Ready for your auditor

Give them a read-only login to see controls, evidence and documents in one place.

What feeds it

Know where you stand before a regulator asks.