Checkpoint · Essential Eight
Essential Eight software, measured from your Microsoft 365
Checkpoint assesses each of the eight mitigation strategies against the maturity level you are targeting, reads the settings Microsoft 365 already holds, and turns the gaps into an uplift plan with owners and evidence.
The demo is the real console with sample data. No sign-up.
What Checkpoint holds for Essential Eight
- The eight strategies, assessed against the ACSC Essential Eight Maturity Model level by level (ML1 to ML3), against the target level you set, rather than as a flat checklist.
- Wording aligned to the November 2023 maturity model.
- Cross-mapping to ISO 27001, so a control you evidence once counts for both.
- An uplift plan of actions, owners and due dates, with evidence attached when each is done.
Measured from your Microsoft 365
The scan reads what Microsoft 365 can show for the strategies: multi-factor authentication, application control (WDAC), Office macro settings, operating system and application patching, administrative privileges (global admin count and PIM), and backups. Strategies Microsoft 365 cannot show are marked for a manual check, never guessed.
Checkpoint signs in with Microsoft Entra and reads your settings through Microsoft Graph with read-only, delegated permissions. Your records are SharePoint lists in your own tenant, so if you stop using Checkpoint they are still yours. How Checkpoint works.
Questions
- Which maturity level should we target?
- Most Australian organisations target Maturity Level Two. It is required for non-corporate Commonwealth entities and increasingly asked for in government supply chains. Checkpoint lets you set the target per organisation.
- Does Checkpoint fix the settings for us?
- No. It reads your settings and never changes them. Each gap becomes an action with the steps to fix it.
- Do we need Microsoft 365 E5?
- No. Checkpoint checks which Microsoft 365 features your licences include. A check that needs a licence you do not have shows as a manual check instead of failing.
