Essential Eight Cyber Self-Check

Results

Overall (your weakest area): Maturity Level Zero

Score: 0 of 24 (0%)

Patch applications: Maturity Level Zero

Patch operating systems: Maturity Level Zero

Multi-factor authentication: Maturity Level Zero

Restrict administrative privileges: Maturity Level Zero

Application control: Maturity Level Zero

Microsoft Office macro settings: Maturity Level Zero

User application hardening: Maturity Level Zero

Regular backups: Maturity Level Zero

Fix 1: Patch applications: Turn on automatic updates for browsers, Office, PDF readers and email, remove programs that no longer get updates, and check weekly that updates are actually installing.

Fix 2: Patch operating systems: Replace any computer or server on an unsupported version of Windows, and make sure updates install every month without waiting for someone to click.

Fix 3: Multi-factor authentication: Turn on multi-factor authentication for email, Microsoft 365 or Google, remote access and banking first. It stops most stolen-password attacks.

At least one of the eight is not in place. Maturity Level One across all eight is the baseline the Australian Signals Directorate recommends for every organisation.

A quick self-check in plain words, not an assessment or certification, and not endorsed by the Australian Signals Directorate. Your overall level is your weakest area, because attackers look for the gap. The full Essential Eight Maturity Model is published free at cyber.gov.au.