Essential eight
Essential Eight, made simple for Australian SMEs
Streamline your Essential Eight assessment and stay protected all year with Active Protect threat-detection software. Clear questions, step-by-step guidance and expert support at every maturity level.
The Essential Eight Maturity Model defines four levels, from Maturity Level Zero to Maturity Level Three. These describe progressively stronger implementation of the eight mitigation strategies
What is Essential Eight?
The Essential Eight is an Australian Cybersecurity Centre-developed cybersecurity framework, proven to mitigate online threats and improve organisations’ defences. It focuses on eight key controls that are crucial for preventing cyberattacks.
Why do you need Essential Eight?
Essential Eight is a compliance requirement for some industries, such as financial services, defence and healthcare. However, all businesses can benefit from completing the assessment which helps you attain and maintain a government-approved standard of cybersecurity, reducing cyber risk.
Cybercrime remains a significant threat in Australia, with over 87,400 reports made to law enforcement in the 2023-24 financial year - still averaging one every six minutes. Can your business afford to be unprepared?
Benefits of Active Protect
Continuous device visibility to support Essential Eight readiness. Active Protect monitors device security settings, identifies potential gaps and provides guidance to help employees address issues.
Continuous protection
Guard against cyber threats around the clock.
Quick Fixes
Resolve issues with just a few clicks.
Complete Visibility
Monitor every device across your business.
Universal Support
Compatible with MacOS, iOS, Windows, and Android devices.
Remote Work Friendly
Ideal for BYOD policies.
Robust Security Checks
Software vetted against 210,000+ common vulnerabilities.
Interactive Training
18 modules complete with factsheets and quizzes.
Policy Management
Use templated policies with distribution and read receipts for streamlined compliance.
Easy-to-use digital portal
Clear questions. Expert guidance. No jargon.
Our questionnaire turns the Australian Signals Directorate's eight mitigation strategies into easy-to-understand questions, with in-platform guidance and unlimited support. Save your progress, pick up where you left off, and see exactly what's left to complete.
Complex framework. Simple assessment.
Simplified progression framework
Know what to do next, and when.
Our step-by-step framework shows what's needed at each Essential Eight maturity level, from Maturity Level Zero to Three. Each step is broken into clear actions, so you can see where you are today, what it takes to reach the next level, and which changes reduce the most risk first.
Progress you can plan. Maturity you can measure.
Year-round monitoring
Protection that doesn't stop on assessment day.
Support ongoing security and compliance between assessments. Combine Essential Eight assessment and guidance with continuous monitoring to identify risks, track improvements and support alignment with relevant controls
An assessment is a snapshot. Protection is continuous.
Unlimited support
Expert help at every level, at no extra cost.
Get all the support you need to get started and scale up through the Essential Eight maturity levels. Our team helps you interpret requirements, answer questions and plan your next steps, whether you're just starting out or working towards a higher level.
No support limits. No surprise fees. Just expert guidance.
Trusted by organisations of every size
Partner with CyberSmart and HAT Distribution
Founded with the principles of simplicity, expertise and value-add solution selling, HAT’s services are underpinned by continuous improvement, creative solutions and the innovative use of business systems and technology – all geared towards delivering real commercial success for customers.
Join our Partner Programme and get all the software, expert support, and resources you’ll need to be the partner your clients can’t live without. Expand your portfolio, extend your reach through new solutions and win more business effortlessly, with CyberSmart.
do you need help?
Frequently asked questions
- Protection from the most common threats
- Better control over your operations
- Reduced risk of human error
- Greater insight into how applications, operating systems and devices are used
- The ability to bid for government tenders and contracts
- A competitive advantage over your rivals
- Prove to partners and customers that you take cybersecurity and data protection seriously
The 8 technical controls are:
- Application whitelisting
- Patching Applications
- Patching Operating Systems
- Configuring Microsoft Office macro settings
- User application hardening
- Restricting Administrative Privileges
- Multi-factor authentication
- Daily backups
Essential Eight has three maturity levels, each one requiring you to implement further cybersecurity controls. Our questionnaire includes the three maturity models as tabs within the platform.
As you complete each question set, it will turn green, signifying you’re ready to move to the next level. Our progression bar displays all of the questions and includes a handy percentage so you’ll always know how close your business is to full security maturity.
CyberSmart Active Protect is a powerful on-device agent that delivers comprehensive endpoint monitoring, risk management, policy enforcement, and cybersecurity awareness training.
Active Protect regularly monitors and reports the status of a device by running through a series of security controls, identifying any vulnerabilities in an easy-to-understand traffic light system.
Active Protect is plug-and-play within your existing IT setup. It provides an intuitive organisation dashboard that can be easily utilised by non-technical personnel throughout your company. This simplicity empowers your non-expert workforce to actively participate in protecting your business.