Use this free ASD Essential Eight readiness checklist to gauge your cyber security maturity across all eight mitigation strategies. Select Yes / Partial / No for each item β weβll calculate your score by domain and generate a PDF you can use in risk discussions, audit prep and uplift planning.
All eight ASD Essential Eight strategies: Application Control, patching, macros, user application hardening, admin privileges, OS patching, MFA and backups β mapped to practical, evidence-ready questions.
Select Yes = 2, Partial = 1, No = 0 for each item. We calculate an overall readiness score plus a domain-by-domain breakdown.
Download a free, branded PDF readiness report with a score dial, domain bars, top gaps and detailed responses. Your details are sent via a secure AWS endpoint and used only to share the report and relevant security, privacy and AI governance updates.
Allow-lists for approved executables, libraries, scripts and MSI.
Timely patching of Internet-facing and high-risk apps.
Block or tightly control macros from the Internet.
Disable risky features (e.g., Flash/Java, ads, web trackers).
Least privilege, approvals, and JIT/JEA patterns.
Meet SLAs for OS patches with centralised visibility.
MFA for remote, privileged and sensitive access.
Tested, immutable/tamper-evident backups and restores.
Answer the questions to see your readiness.