Cyber security update
The Essential Eight is evolving into ASD Essentials
In October 2026 the Australian Signals Directorate (ASD) launched ASD Essentials, the evolution of the Essential Eight. Where the Essential Eight focused on eight key technical mitigation strategies, ASD Essentials takes a broader approach: business accountability, wider security coverage and evidence that protections work effectively. ASD is maintaining both frameworks during the transition.
What has changed
Four shifts to plan for
Business-wide responsibility
Cyber security is shared between leadership, IT providers and staff, not left to IT alone.
Effectiveness over installation
Organisations need evidence that security controls work in practice, not only that they are installed.
Broader coverage
More focus on identity, cloud services, suppliers, vulnerabilities, monitoring and incident response.
A different assessment approach
Essential Eight maturity levels do not automatically translate into ASD Essentials ratings.
Existing maturity levels do not carry over
An Essential Eight maturity level does not automatically convert to an ASD Essentials rating. Organisations that currently report against the Essential Eight should plan to be assessed again under the new framework.
Next steps
What your organisation should do
- Review existing security controls, policies, backups and the evidence available for each.
- Identify gaps against the applicable ASD Essentials guidance.
- Prioritise internet-facing systems, identity security and critical systems.
- Review supplier security, administrator access and staff awareness.
- Agree improvement priorities, responsibilities, budgets and timelines.
- Keep evidence of activities such as access reviews, vulnerability fixes and backup restoration tests.
Shared responsibility
Who is responsible
Business owners
Oversee cyber risk, approve priorities and allocate resources.
Solution Tech
Reviews technical controls, identifies gaps, recommends improvements and supports agreed actions.
Your team
Follow security procedures, complete training and report suspicious activity.
Official guidance
Read the ASD guidance
- ASD Essentials cyber.gov.au →
- Transitioning from the Essential Eight cyber.gov.au →
- Essential Eight assessment process guide cyber.gov.au →
This is a general overview, not a formal assessment or compliance guarantee. Confirm applicable requirements against official ASD guidance.
How Solution Tech can help
Plan your move to ASD Essentials
Solution Tech can review your current security arrangements, assess gaps against ASD Essentials and develop a prioritised improvement plan for your organisation.
