Essential Eight Maintained
Reaching the level is half the job. Keeping it is the other half.
Maturity slips when nobody owns it. New software gets around application control, admin rights creep back and patching falls behind. We keep the controls in place, show you the evidence every month and reassess before each attestation.
- Microsoft Partner
- AZ-104 and AZ-305 certified engineers
- Senior engineers only
- Brisbane-based, working across Australia
What is included
- A monthly evidence report per strategy, ready to forward to whoever asks
- Change checks: your settings are compared with the agreed setup every month, and put back when someone changes them
- Application control exceptions handled within agreed response times
- Patch compliance tracked against your level's timeframes
- Privileged access reviews
- Backup restore tests on a schedule
- A reassessment before each attestation, contract review or insurance renewal
- Mapping to ASD's Essentials series when it is published
Who it suits
Organisations that have reached their level and need to prove it every year, and small businesses without a security specialist who want someone to own the Essential Eight for them.
How it is priced
On its own, a fixed monthly fee based on the size of your environment, with a 12-month term. It is included in Managed Microsoft 365 and security at no extra charge.
When the Essentials arrive
ASD is replacing the Essential Eight with its broader Essentials series, and the ACSC has said the Essential Eight will be retired in about two years. Because your settings are recorded and your evidence is organised by control, we map your position to the new guidance when it is final. The service carries over to the Essentials, with no new contract.
Questions buyers ask
Do we need to have done the uplift with you?
No. If another provider did the uplift, we start with a short assessment to confirm your level and record every setting, then maintain them from there.
Can we run it ourselves instead?
Yes. Every uplift ends with runbooks and a record of every setting. Maintained is for organisations that would rather not carry the monthly work.
What happens when something drifts?
We are alerted when a setting no longer matches the agreed setup, put it back or raise it with you if the change was deliberate, and record it in the monthly report.
Start a conversation
Keep the level you worked for.
Tell us your level and when you next need to prove it.
Talk to an Engineer