Essential Eight Cyber Threat Mitigation Strategies

While no set of mitigation strategies are guaranteed to protect against all cyber threats, organisations are recommended to implement eight essential mitigation strategies from the Strategies to Mitigate Cyber Security Incidents as a baseline. This baseline, known as the Essential Eight, makes it much harder for adversaries to compromise systems.

The mitigation strategies that constitute the Essential Eight are following:

application control
patch applications
configure Microsoft Office macro settings
user application hardening
restrict administrative privileges
patch operating systems
multi-factor authentication
regular backups.

View: Essential Eight on cyber.gov.au

Capabilities

This design is part of the following capability.

CAP10

Information Asset Security

Policies

This design can be relevant to meeting the requirements of the following policies.

POL39

Information Asset Security Policy

Standards

This design can be useful in achieving the intent of the following standard(s).

Information Security Manual (ISM)

STA8

The Australian Cyber Security Centre (ACSC) produces the Information Security Manual (ISM). The purpose of the ISM is to outline a cyber security framework that an organisation can apply, using their risk management framework, to protect their systems and data from cyber threats. The ISM is…

Information Asset Security Standard

STA52

The Australian Government ensures the safety and security of its operations to remain a trusted custodian of sensitive information. It will continue to maintain the safe, secure operation of government systems and technology through the effective implementation of the Information Security Manual,…