ACSC updates Essential Eight Maturity Model for 2023

As the cybersecurity division of the Australian Signals Directorate, the ACSC has recently updated the Essential Eight framework to adapt to the evolving landscape of the industry and assist organisations in effectively defending themselves against threat actors.

Through collaboration with industry and government at both domestic and international levels, the ACSC has gained comprehensive insights into the needs of agencies to bolster their defence mechanisms.

The commitment of the Australian Signals Directorate (ASD) to providing contemporary, purposeful, and practical cybersecurity advice is reflected in the annual updates to the Essential Eight Maturity Model (E8MM). This model is specifically designed to aid organisations in safeguarding their internet-connected information technology networks against common cyber threats.

The November 2023 update by the ASD introduces significant changes, particularly impacting maturity levels one, two, and three. Noteworthy adjustments include alterations to the requirements for the 48-hour response time frame for addressing vulnerabilities in online services. …