Assess Your Essential Eight Maturity
Understand where you stand against ASD's Essential Eight. Get a clear roadmap to ML2 compliance with actionable priorities.
E8 ML2 Assessment
Essential Eight Maturity
ML2 Status
6/8 AT ML2
Assessment Cost
From $15k
Scales with environment complexity
The challenges you're facing
Unsure where you stand
You know Essential Eight matters but don't know your current maturity level or where the critical gaps are.
Deadline pressure
DISP or contract requirements are approaching and you need to demonstrate ML2 compliance.
Conflicting advice
Your IT provider says you're covered, but you're not confident their operational reporting maps to E8 controls.
Budget uncertainty
You don't know what compliance will actually cost or where to focus limited resources.
What's included in the assessment
E8 ML2 gap assessment
Assessment against all 8 mitigation strategies using ACSC verification methodology.
Maturity scoring
Current maturity level documented for each control using ACSC assessment tools.
Prioritised compliance roadmap
Sequenced actions with effort estimates so you know exactly what to do and when.
Cost estimate for remediation
Clear budget guidance for closing gaps, so you can plan your investment.
Executive summary
Board-ready report translating technical findings into business-relevant language.
Current state documentation
Detailed record of your existing control environment as the baseline for uplift.
Case study to be inserted here
Who this service is for
Defence supply chain SMEs
You're preparing for DISP and need to demonstrate Essential Eight ML2 compliance as part of your cyber security requirements.
DISP-registered organisations
You've been assessed before but need to validate ongoing compliance and close remaining gaps before your next review.
Organisations under contract pressure
You need to evidence E8 compliance quickly for an upcoming contract, tender, or audit deadline.
Transparent, scalable pricing
Free Health Check
Half-day on-site scoping session. Walk away with a clear picture of your current posture and direct advice on whether a full assessment is the right next step.
- On-site scoping with senior consultant
- Indicative E8 posture snapshot
- Clear recommendation on next steps
E8 ML2 Assessment
Full Essential Eight ML2 gap assessment with compliance roadmap and executive summary.
- All 8 mitigation strategies assessed
- Prioritised remediation roadmap
- Executive & board-ready reporting
- DISP readiness indicator
Assessment & Uplift
Assessment plus implementation — closing gaps, building documentation, and preparing your organisation for compliance milestones.
- Everything in Assessment
- Control implementation & configuration
- Policy & documentation development
- DISP application support
Pricing note: Assessment pricing scales with environment complexity. Small environments (under 50 users, M365-centric) start from $15,000. Larger or hybrid environments are scoped individually. All pricing is indicative and depends on environment size and complexity.
Frequently asked questions
How long does an E8 assessment take?
Typically 2–4 weeks depending on environment size. Small environments can be assessed in under 2 weeks. The timeline depends on how quickly your team can provide access to key systems, documentation, and key stakeholders for workshops.
What do we need to prepare?
Access to your environment documentation, IT architecture diagrams, and key stakeholders for workshops. We'll provide a detailed preparation checklist during scoping so you know exactly what you need to have ready.
Do you also implement the fixes?
Yes — our Uplift tier covers assessment plus implementation. We can assess first and then scope uplift separately, or combine both from the start. We'll discuss the best approach for your situation during scoping.
How is this different from what our MSP tells us?
MSP reporting is operationally focused — uptime, tickets, patching status. Our assessment maps controls specifically to ASD's Essential Eight maturity model with evidence-based verification against each mitigation strategy. It's a formal, compliance-grade assessment rather than operational reporting.
Can this help with our DISP application?
Absolutely. Essential Eight ML2 is a core DISP cyber security requirement. The assessment report directly supports your DISP application and CSQ completion. Many of our clients use the E8 assessment as a stepping stone to full DISP readiness.