Essential Eight Cyber Security for Sydney Businesses

The Essential Eight is a set of eight mitigation strategies published by the Australian Cyber Security Centre: application control, patching applications, Microsoft Office macro settings, user application hardening, restricting administrative privileges, patching operating systems, multi-factor authentication, and regular backups. Together they address the majority of techniques used in real-world attacks on Australian organisations.

The ACSC defines Maturity Levels 0 to 3. Level 0 means significant weaknesses. Level 1 is the baseline most small businesses should aim for. Levels 2 and 3 raise the bar for higher-risk environments and are commonly expected by government, insurers and larger enterprise clients. We recommend a target level based on your risk and obligations, not a sales target.

For most Sydney small and mid-sized businesses, Maturity Level 1 is the sensible starting point and satisfies the majority of insurance and supplier requirements. If you handle sensitive personal data, work with government or are regularly targeted, we would discuss Level 2. We will tell you honestly if Level 3 is unnecessary for your situation.

A written gap assessment for a typical small business starts around $2,500. Remediation is priced in fixed stages so you can spread the cost. Many of the controls, especially MFA, macro hardening and Microsoft 365 security settings, cost little more than configuration time because you already own the tools.

Microsoft 365 provides the tools for several of the eight strategies, including MFA, patching, macro controls and application hardening, but they are not switched on or configured correctly by default. We configure your tenant and endpoints so the controls are actually enforced and can be evidenced.

A focused business of 10 to 50 staff can usually reach Maturity Level 1 within four to eight weeks, depending on how much remediation is needed after the initial assessment. We sequence the work so the highest-risk gaps close first.