Essential Eight

Overview

Essential Eight (Essential 8) — Australian Cyber Security Centre baseline mitigation strategies for organizations. ComplAI maps this framework’s controls so your team can track implementation, evidence, and audit readiness.

8 controls available in ComplAI for this framework.

Who it's for

• Organizations that must demonstrate Essential 8 compliance
• Security and compliance teams operating in Australia
• Customers and partners that require Essential 8 assurance

Why it matters

Essential 8 is a recognized security framework. Activating it in ComplAI lets you manage controls, evidence, and readiness in one place.

How ComplAI helps

• Activate Essential 8 in the Framework Library to load its control catalog
• Assign owners, track compliance status, and attach evidence per control
• Use risk register and issues workflows when controls fail or deviate
• Export readiness views for leadership and auditors

Sample controls

• ML1

  Application control

  change management

• ML2

  Patch applications

  vulnerability management

• ML3

  Configure Microsoft Office macros

  change management

• ML4

  User application hardening

  change management

• ML5

  Restrict administrative privileges

  access control

• ML6

  Patch operating systems

  vulnerability management

Getting started

1. Open Framework Library and activate Essential 8
2. Review the control list and prioritize high-impact domains
3. Attach policies, procedures, and technical evidence
4. Mark controls audit-ready and monitor residual gaps