Checkpoint · ASD Essentials
ASD Essentials, assessed and evidenced in your Microsoft 365
Checkpoint carries ASD Essentials for enterprise IT, the successor to the Essential Eight: every action rated in the domains it applies to, with ASD’s indicators of good practice, your reasoning and evidence, and the posture scan results that bear on each.
The demo is the real console with sample data. No sign-up.
What Checkpoint holds for ASD Essentials
- All 58 actions under 28 principles of ASD Essentials for enterprise IT, across the eight domains: governance and culture, visibility and response, and the six technical domains in ASD’s three priority phases.
- Each action rated in each domain it applies to (212 ratings) as not assessed, not effective, partially effective or fully effective, with the assessor’s reasoning and evidence.
- ASD’s indicators of good practice for every action: tick what you observe and Checkpoint suggests a rating for you to confirm.
- Scoring as in ASD’s Assessment Workbook: each principle takes its weakest action’s rating, and each domain shows its % effective.
- A CSV export in the workbook’s columns and a report of the domain summary and every rating.
Measured from your Microsoft 365
The Microsoft 365 posture scan adds evidence to the actions it can see, for example phishing-resistant MFA, legacy authentication, dormant accounts, privileged role assignment, device baselines, patching, logging and backups. A scan result is evidence for the assessor, never a rating on its own.
Checkpoint signs in with Microsoft Entra and reads your settings through Microsoft Graph with read-only, delegated permissions. Your records are SharePoint lists in your own tenant, so if you stop using Checkpoint they are still yours. How Checkpoint works.
Questions
- Does ASD Essentials replace the Essential Eight?
- ASD published it in October 2026 as the Essential Eight’s successor. The Essential Eight remains available, and a contract or insurer that names an Essential Eight maturity level still applies until it changes. Checkpoint carries both.
- Are the phases maturity levels?
- No. ASD says the priority phases are a sequence, not a rating. Effectiveness is rated action by action, and Checkpoint shows the result per domain.
- Does Checkpoint rate the actions for us?
- No. ASD’s indicators inform the assessor’s judgement, and the scan supplies evidence. The rating is always the assessor’s, with the reasoning recorded beside it.
