Essentials for Enterprise IT.

We deliver the solutions you need to achieve and sustain compliance and reporting for ASD Essentials for Enterprise IT.

David, General Manager Products and Portfolio

We get you there and keep you there.

We deliver solutions to address the 8 domains and most of the 27 principles underpinning the Essentials. Whether it’s a comprehensive compliance program or closing critical gaps, we have the expertise you need.

We do the heavy lifting.

We’ve created solutions addressing the more difficult aspects of achieving, maintaining and reporting on Essentials, reducing the risk of noncompliance.

Understand ASD’s new approach to enterprise cyber defence.

ASD’s Essentials for Enterprise IT builds on the Essential Eight, with a broader focus across enterprise IT, operational technology and cloud environments. Download our guide for a clear overview of what has changed and how your organisation can start applying the framework.

Fast and effective.

Start your journey to compliance here.

Our capability founded on meeting Government compliance requirements, delivers outcomes in all 8 Domains of Essentials.

Governance and Culture

Ensuring specific people are accountable, properly resourced and supported to implement and sustain the required processes, technology and – most importantly – mindset across the organisation.

Visibility and Response

Having effective line-of-sight of your Enterprise IT Environment and a consistent ability to detect, contain and eradicate threats against it. This requires an accurate inventory, ability to analyse activity logs and other telemetry, and Security Operations people, processes and technology.

Boundary Services

The parts of your IT environment that sit next to the public internet, and therefore the most accessible by adversaries.

Identity Services

The components that determine who can access what and how. For most organisations these include Active
Directory/Entra ID and other identity, credential and access management solutions.

Critical Processes and Services

The “crown jewels”, those applications and data that the organisation depends on to function. It differs
from organisation to organisation but typically includes customer data, intellectual property, email, payment systems and ERP platforms.

Privileged Environments:

Where the IT Team live and breathe; the tools, admin accounts and platforms that underpin the other domains. Administrative workstations, jump servers and cloud management portals.

Business Systems:

The apps and data that most people in the organisation are using most of the time. Office Productivity – documents/spreadsheets/presentations etc., Line of Business applications – including SaaS, collaboration and messaging tools.

User Devices:

Those “endpoints” that were the primary focus of Essential Eight but expanded to explicitly include corporate managed mobile devices and other non-Microsoft devices.

Patching Mission Critical and Legacy systems.

Agencies struggle to meet the outcomes of the Legacy System Management and Vulnerability Management Principles. Virtual patching blocks specific exploits, enabling immediate protection against vulnerabilities for public facing services.

Identity, credential and access management.

With our Application Protection solution external users can be re-directed via a WAF MFA page for compliant authentication.

Five pillars of our Essential 8 solution.

Security Operations

Our SOC monitors security events and uses their expertise and data analytics to identify patterns and detect threats.

Secure Core Networking

Establish secure links between your core network and public cloud services, maintaining speed and performance.

User Protection

A unique mix of SASE expertise, Protected-level security services, and a team of NV1+ cleared engineers based in Australia.

Application Protection

Layered security for public facing web applications, customized to threat profiles, compliance needs, and budget.

Cloud and Colocation

Our cloud and colocation services sit behind physical and logical defence-in-depth layers, in our ultra-secure, high capacity datacentres.

Why the Essentials for Enterprise IT?

Why another change to the compliance regime? Quite simply because the threat landscape is changing and we need to adapt as a nation. The Essentials captures the broader range of mitigations an agency should have in place and provides a clear structure and approach to secure your environment.

Accessible to All

None of these domains are bleeding edge. Every agency of all shapes and sizes can take practical steps within each Domain to uplift their IT environment.

Cost-effective

Agencies can develop their plan for each Domain, evaluate their performance against each Principle and develop an Implementation Plan with certainty of investment.

Deployment

Whilst your agency can implement these mitigation strategies in an ad hoc manner, basing your security posture on a single comprehensive framework has many benefits.

Defence in Depth

These strategies are designed to work together. Individually they are all powerful tools to protect individual components and operations of your network. Together they represent a multi-level approach that provides comprehensive protection, even if adversaries do manage to break one of the defensive measures.

Automation

Many of these mitigation strategies can be automated to reduce management overheads whilst ensuring compliance. Most security solutions can be set up with thresholds and alerts to monitor network traffic so that any anomalous activity can be quickly identified and investigated. Massive unauthorised downloads, such as the Panama Papers leak, wouldn’t have happened with the right mitigation strategies in place.