24/7 support: 0406 913 375

How well protected is your business?

Answer 8 quick questions based on the ASD Essential Eight and see where you stand in about 2 minutes. Free, with no sign-up needed to see your score.

1 of 8Multi-factor authenticationDo staff need a code or app approval (MFA) to sign in to email, Microsoft 365 and remote access?
2 of 8Patch applicationsAre updates for browsers, Microsoft Office, PDF readers and other apps installed within two weeks of release?
3 of 8Patch operating systemsAre Windows and Mac updates installed at least monthly, with every computer on a supported version (not Windows 10)?
4 of 8Restrict admin privilegesDo staff use everyday accounts without admin rights, with admin access kept to separate accounts?
5 of 8Application controlIs software blocked from running out of places like Downloads and temporary folders?
6 of 8Microsoft Office macrosAre Office macros blocked in files that come from the internet or email?
7 of 8User application hardeningAre web browsers locked down, for example blocking web ads and Java, with settings staff can't change?
8 of 8Regular backupsAre important files and systems backed up automatically, stored separately, and has a restore been tested?

This self-check is based on Maturity Level One of the ASD Essential Eight. It's a guide to where the biggest gaps are, not a formal assessment.

Frequently asked questions

What is the Essential Eight?

The Essential Eight is a set of eight baseline cyber security strategies published by the Australian Signals Directorate (ASD). It's widely used by insurers, government and larger clients as a measure of whether a business has the basics in place.

Is this a formal Essential Eight assessment?

No. It's a quick self-check based on Maturity Level One of the Essential Eight, designed to show where the biggest gaps are. A formal assessment involves checking configurations and evidence on your systems, which we can do for you.

Is the Essential Eight being replaced?

The ASD has announced it will gradually move from the Essential Eight to broader guidance called Essentials over the next few years. The eight controls remain the recommended baseline in the meantime, and fixing them now puts you in a strong position for whatever comes next.

What happens after I send my results?

One of our engineers will review your answers and get back to you, usually within one business day, with a short summary of what to fix first. There's no cost and no obligation.