Aussie Cyber Check
Aussie Cyber Check
Eight baseline steps that make the biggest difference to your cyber security for the least effort. Here they are in plain English.
The Essential Eight is a set of eight mitigation strategies published by the Australian Signals Directorate (ASD) through the Australian Cyber Security Centre (ACSC). They are chosen because, together, they stop or limit most of the common attacks a small business is likely to face. You don't have to do everything at once. The point is to know where you stand and improve the weakest areas first.
Only let approved programs run on your computers, so unknown or malicious software can't simply launch itself.
Keep everyday programs (browsers, office software, PDF readers) up to date, so known holes attackers rely on are closed quickly.
Turn off or tightly control macros in Office documents. Macros are a common way malware gets in through an emailed file.
Switch off risky features in web browsers and other apps (like old plug-ins and unnecessary scripting) that attackers exploit.
Give staff only the access they need for their job, and keep powerful admin accounts for admin tasks. If an ordinary account is compromised, the damage is limited.
Keep Windows, macOS and your other operating systems updated, and retire versions that no longer get security fixes.
Require a second step (like a code or a tap on your phone) as well as a password, so a stolen password alone isn't enough to get in.
Back up your important data regularly, keep a copy that attackers can't reach, and test that you can actually restore it. This is your safety net against ransomware.
Aussie Cyber Check helps you understand and self-assess against these eight controls in plain language. It gives you a score, shows your weakest link, and suggests what to fix first. It is a starting point you can use yourself, for free.
It is not a government product and it does not certify compliance. A good result is a sign you are on the right track, not a guarantee or an official assessment. For a formal maturity assessment, or for higher-risk environments, work with a qualified professional.
Based on the ASD/ACSC Essential Eight, used under CC BY 4.0. For the official material, see the Australian Cyber Security Centre at cyber.gov.au.
Answer 24 plain-language questions and get your score in about ten minutes. Free, no account.
Start your free assessment