Essential Eight

Developed as an evolution of the ASD’s Top Four recommendations,
the Essential Eight is a baseline to strengthen your organisation’s cybersecurity defences.

Essential Eight for Enhanced Cyber Security Protection

The “Essentials 8” process refers to a set of eight essential strategies recommended by the Australian Cyber Security Centre (ACSC) for mitigating cybersecurity incidents. These strategies are part of the broader “Strategies to Mitigate Cyber Security Incidents” framework and are designed to protect systems and data from various cyber threats. Implementing these eight strategies effectively can significantly reduce the risk of cybersecurity breaches.

Application Whitelisting

Ensure only approved applications can execute, preventing malicious software from running on systems.
This reduces the risk of unauthorized software, including malware, from being executed.

Patch Applications

Regularly update and patch applications to fix security vulnerabilities.
Focus on high-risk applications, such as web browsers, Microsoft Office, Java, and PDF viewers.

Configure Microsoft Office Macro Settings

Restrict the use of macros in Microsoft Office applications.
Only allow macros from trusted locations and disable macros in documents received from the internet unless required.

User Application Hardening

Apply hardening techniques to user applications to reduce the attack surface.
For example, block ads and disable Flash, Java, and other unneeded features in browsers.

Restrict Administrative Privileges

Limit administrative privileges to only those who need them.
Regularly review and restrict the use of these privileges to minimize the potential damage from compromised accounts.

Patch Operating Systems

Keep operating systems up to date by applying security patches.
Prioritize patching vulnerabilities that can be exploited remotely and ensure all devices have supported and secure operating systems.

Multi-Factor Authentication (MFA)

Implement multi-factor authentication for access to sensitive systems and information.
This adds an extra layer of security by requiring multiple forms of verification.

Regular Backups

Ensure that regular backups of important data are performed and securely stored.
Regularly test backups to ensure they can be restored, and store backups offline or in a way that prevents them from being corrupted by ransomware.

Our solutions

Cybersecurity Maturity Assessment

Our services start with a high-level assessment of your organisation’s existing cybersecurity maturity level. Our experts will conduct a rapid high-level review of your IT infrastructure, applications, policies, and procedures to identify strengths, weaknesses, and potential vulnerabilities and provide an executive summary of the cybersecurity posture and recommended remediation actions.

Essential Eight Alignment

Based on the assessment, we will evaluate your organisation’s alignment with the ASD Essential Eight mitigation strategies. Our team will provide a clear picture of the gaps and areas that require improvement to achieve the desired security posture.

Customised Roadmap

After identifying areas for improvement, we will develop a customised roadmap tailored to your organisation’s unique needs. The roadmap will outline step-by-step actions required to implement the Essential Eight strategies effectively.

Security Policy and Procedure Enhancement

We will assist your organisation in developing and enhancing security policies and procedures to align with the Essential Eight principles. This ensures that security practices are clear, consistent, and enforced across the organisation.

Security Awareness Training

To foster a security-conscious culture within your organisation, we provide targeted security awareness training for employees. This empowers your workforce to recognise and respond to potential cyber threats effectively.

Technical Implementations

Our experts will guide the implementation of technical controls and solutions necessary to meet the Essential Eight requirements. This includes but is not limited to network segmentation, application whitelisting, and multi-factor authentication.

Incident Response Planning

We will work with your organisation to develop an effective incident response plan to swiftly and effectively respond to potential cybersecurity incidents. This plan will mitigate damage, minimise downtime, and accelerate recovery efforts.

Continuous Monitoring and Review

As cybersecurity threats evolve, we will continuously monitor your organisation’s security posture and conduct periodic reviews to ensure ongoing alignment with the Essential Eight principles.

Why Choose Genisys

Genisys is a Network partner with the Australian Cyber Security Centre (ACSC)

Achieve Maturity Level 1 and unlock Maturity Level 2 with Genisys

Our Free Essentials 8 Basic Assessment

Are you ready to take your cyber security to the next level? Elevate your protection with our complimentary Cyber Security Essentials 8 Basic Assessment.

START NOW