Framework library · Australia

Essential Eight

ACSC Essential Eight. Published by ACSC / ASD, version Maturity Model (Nov 2023). Kapālins maps it at category level: the assessment’s 5 AI-risk areas, each tied to this framework, rather than clause by clause. 1 of 5 risk areas are proved by a live signal from the platform, and 4 by the assessment.

Read the source document

Risk areas mapped
LLM Security controlsLive signal
Agentic AI Risk controlsAssessment
AI Privacy & Data Governance controlsAssessment
Model Integrity & Supply Chain controlsAssessment
AI Governance & Risk Management controlsAssessment

Live signal: a signal from the gateway, probes or device sensor proves it continuously. Assessment: it is evidenced by answers to the assessment. Both are exported in the regulator evidence pack.

History

How the Essential Eight got here.

  1. Adopted

    ASD published the Essential Eight within its updated Strategies to Mitigate Cyber Security Incidents. Australian Signals Directorate

  2. Amended

    ASD published Essential Eight Maturity Model changes, including tighter patching, MFA and privileged access requirements. Australian Signals Directorate

  3. Proposed

    Partner consultation closed on Essentials for enterprise IT, ASD’s planned successor to the Essential Eight. iTnews

See this framework on your estateAll 29 frameworks