What is the Essential Eight?

The Essential Eight is a cyber security strategy developed by the Australian Cyber Security Centre (ACSC), aimed at providing businesses with a foundational set of practices to protect against a wide range of cyber threats. These strategies are designed to achieve three key objectives: preventing malware from harming your systems, limiting the impact of cyber security incidents, and ensuring that your data and systems can be quickly restored after an attack. For business owners, understanding and implementing the Essential Eight means taking proactive steps to safeguard your operations, reputation, and the trust of your customers.

Here’s a simplified overview of what each component of the Essential Eight means for your business:

1. Application Control: This involves only allowing approved and secure applications to run on your systems. It’s like having a guest list for a private event, ensuring only invited applications can operate, which significantly reduces the risk of malicious software infiltrating your network.
   
   
2. Patch Applications: Regularly updating your software applications to fix security vulnerabilities. Think of it as maintaining your car to ensure it runs smoothly and safely, reducing the risk of breakdowns or, in this case, security breaches.
   
   
3. Configure Microsoft Office Macro Settings: Macros can be used maliciously to compromise your systems. By only allowing trusted macros to run and blocking those from untrusted sources, you’re essentially vetting who gets a key to your office.
   
   
4. User Application Hardening: This means configuring web browsers and email clients to minimise the risk of attacks from the internet or email-based threats. It’s akin to reinforcing your doors and windows against break-ins.
   
   
5. Restrict Administrative Privileges: Limiting who has ‘admin’ access to your systems ensures that only those who truly need broad control for their work have it. This is similar to giving house keys only to family members, reducing the risk of loss or theft.
   
   
6. Patch Operating Systems: Keeping your operating system up to date is crucial for security. It’s like updating the locks on your doors whenever a vulnerability is discovered, ensuring potential intruders can’t easily break in.
   
   
7. Multi-factor Authentication (MFA): Adding an extra layer of security when logging into systems, MFA requires a second form of verification beyond just a password. This makes unauthorised access much harder to gain.
   
   
8. Daily Backup of Important Data: Regularly backing up your data ensures that, in the event of a cyber incident, you can restore your information and continue business operations with minimal disruption.