Government suppliers
When the contract asks for an Essential Eight level.
Government contracts increasingly name an Essential Eight maturity level, ask for evidence, or require an annual attestation. We read the clause with you, assess against it, deliver the uplift and give you evidence you can hand to the contract manager.
- Fixed scope, fixed fee
- Microsoft Partner
- AZ-104 and AZ-305 certified engineers
- Senior engineers only
- Brisbane-based, working across Australia
What we do
- Clause review: which level, which version of the maturity model, which systems and what evidence the contract asks for.
- Assessment: your current level per strategy against that requirement.
- Uplift: the controls delivered, piloted and rolled out in rings, paid by milestone.
- Evidence pack: organised so the contract manager can see each requirement met.
- Reassessment before each attestation, under Maintained.
Reading the requirement
Some contracts ask suppliers to implement the Essential Eight with no level stated. Some name a maturity level. Some ask for an independent assessment or an annual attestation. The work differs for each, so we start by agreeing what the clause requires and record that in writing.
Questions buyers ask
The contract doesn't name a level. What should we aim for?
We read the clause and the agency's own obligations with you, agree a sensible target, often Maturity Level One or Two, and record the reasoning so you can show it to the contract manager.
Do we need an independent assessment?
Only if the contract says so. Our evidence-based assessment is independent of your IT team. If the contract requires IRAP, we will help you prepare for an IRAP assessor.
What about the annual attestation?
Under Maintained, we reassess before each attestation and give you refreshed evidence to sign against.
Start a conversation
Meet the clause, with evidence.
Tell us what the contract asks for and when it is due.
Talk to an Engineer