The Essential 8 isn’t 8 controls. And it isn’t really a framework. Here’s what it actually is.

The Australian Signals Directorate’s Essential 8 is one of the most widely-referenced cyber security frameworks in the country. It’s also one of the most widely misunderstood — and the misunderstanding is causing Australian businesses to make claims, in security questionnaires and tender responses, that they can’t actually defend when asked. Two things to understand up […]