Essential Eight & compliance
Secure Nerds assesses Australian small businesses against the ACSC Essential Eight and returns a written position, the supporting evidence and a prioritised fix order you can give an insurer or attach to a tender. Assessment is included in the managed package from $1,000 per month for up to five users.
The Australian Cyber Security Centre publishes eight controls that stop most of what actually happens to small business. Insurers and larger customers increasingly ask about them. We assess, report, and fix in a sensible order.
What’s included
A measured position against all eight controls, in plain language, with evidence rather than a self-assessment questionnaire.
Ordered by risk reduced per dollar and per hour of disruption — not alphabetically, and not by what is easiest for us to sell.
MFA, patching, admin restriction, macro settings, application control and backups. Most of these are already in the managed package.
A document you can give an insurer or attach to a tender, updated as your position changes.
Common questions
For federal government entities, yes. For most private businesses it is not law. It matters because it is the checklist your insurer and your larger clients are most likely to recognise, which makes it the most useful yardstick available.
For most small businesses, reaching a consistent Maturity Level One across all eight controls is a bigger risk reduction than chasing a higher level on two of them. We’ll tell you where the genuine gaps are.
We give you the written assessment and evidence. Completing the insurer’s own form stays with you, but you won’t be guessing at the answers.
Last updated
Also part of the package
Next step
Tell us what you’re running now and we’ll come back with a scope and a price in writing.