The ASD Essentials

A plain-English overview: what the framework is, the mitigation strategies, the maturity levels, and the coming rename from the Essential Eight.

Application control means only software your organisation has approved is allowed to run. Everyt...

Patching applications means keeping the software on your devices, browsers, office suites and PD...

Macros automate tasks inside Office documents, but they are also a common way to deliver malware...

Hardening switches off the features attackers abuse but most staff never use, such as Flash, Jav...

Administrative accounts can change almost anything, so this strategy limits who holds them, what...

MFA asks for a second proof of identity beyond a password, so a stolen or guessed password is no...

This strategy keeps the operating systems on workstations, servers and network gear patched, and...

This strategy ensures important data, software and settings are backed up, kept for a suitable p...

Each strategy is rated against four maturity levels, from Level 0 (not aligned) up to Level 3 (f...