A mitigation strategy in the ASD Essentials (currently the Essential Eight), assessed against 8 tests at Maturity Level One.
This strategy keeps the operating systems on workstations, servers and network gear patched, and removes versions the vendor no longer supports.
Why it matters
An unpatched server exposed to the internet is one of the most common ways organisations are compromised. Older, unsupported systems that quietly run a critical service are the usual weak point.
How Conformance helps
- Inventory every operating system, including servers and appliances
- Patch internet-facing systems fastest, within the required window
- Scan for missing operating system patches regularly
- Replace or isolate operating systems that are no longer supported
- Retain patch timelines as evidence
How Conformance helps
Conformance validates this strategy from the evidence your organisation already produces, shows your maturity level, and tells you the next step to raise it.
Official guidance: ASD Essential Eight Maturity Model