Skip to content
ASD Essential Eight

Essential Eight Maturity Assessment

The Australian Signals Directorate's Essential Eight are eight mitigation strategies that make it much harder for adversaries to compromise systems. Answer 8 questions to estimate your maturity level (ML0–ML3) per strategy and overall.

Framework reference: cyber.gov.au — Essential Eight

Question 1 of 80% complete
Application Control

Application control (allow-listing of executables)?

Loading…

Sample report · illustrative data

Sample result: Essential Eight maturity read

Example answers to the eight questions, one per mitigation strategy, each answered with a maturity level from ML0 to ML3 (scored 0 to 3).

Overall

Overall score
58% (14 of 24 points)
Rating
Amber
Weakest strategy
Application Control (first of the lowest-scoring strategies)

By strategy

StrategyLevel chosenScoreRating
Application ControlML11 / 3Red
Patch ApplicationsML22 / 3Amber
Office MacrosML22 / 3Amber
User App HardeningML11 / 3Red
Admin PrivilegesML11 / 3Red
Patch Operating SystemsML22 / 3Amber
Multi-Factor AuthML22 / 3Amber
BackupsML33 / 3Green

How to read it

Green is 80% or more, Amber 50% to 79%, Red below 50%. This is an indicative self-assessment, not an official assessment; maturity should be applied as a package, aiming for the same level across all eight strategies.

Made-up example data. Your own run uses your inputs. Downloads of the full report need Pro.

The tools people use most on PlayCISO.

All tools