ACSC Essential Eight: the evidence behind every control
24 controls. For each, the artefacts auditors ask for, which ones a system already holds, and the first move to stop evidencing it by periodic review.
Restrict Administrative Privileges
ADMIN-ML1Restrict Administrative Privileges (ML1) hardADMIN-ML2Restrict Administrative Privileges (ML2) easyADMIN-ML3Restrict Administrative Privileges (ML3) easyApplication Control
APP-ML1Application Control (ML1) hardAPP-ML2Application Control (ML2) easyAPP-ML3Application Control (ML3) hardRegular Backups
BACKUP-ML1Regular Backups (ML1) moderateBACKUP-ML2Regular Backups (ML2) moderateBACKUP-ML3Regular Backups (ML3) easyConfigure Microsoft Office Macro Settings
MACRO-ML1Configure Microsoft Office Macro Settings (ML1) easyMACRO-ML2Configure Microsoft Office Macro Settings (ML2) moderateMACRO-ML3Configure Microsoft Office Macro Settings (ML3) hardMulti-factor Authentication
MFA-ML1Multi-Factor Authentication - Maturity Level 1 easyMFA-ML2Multi-Factor Authentication - Maturity Level 2 easyMFA-ML3Multi-Factor Authentication - Maturity Level 3 moderatePatch Applications
PATCHAPP-ML1Patch Applications (ML1) moderatePATCHAPP-ML2Patch Applications (ML2) moderatePATCHAPP-ML3Patch Applications (ML3) easyPatch Operating Systems
PATCHOS-ML1Patch Operating Systems (ML1) easyPATCHOS-ML2Patch Operating Systems (ML2) hardPATCHOS-ML3Patch Operating Systems (ML3) moderate