How well is your business defended against a cyber attack?
The ASD Essential Eight is Australia’s baseline for cyber security. Our free scorecard shows where your business stands across all eight strategies—and the fastest wins to close the gaps.
- About 15 minutes
- No sign-up required
- Board-ready PDF
- Hosted in Australia
Essential Eight assessment
Your cyber maturity snapshot
Good foundations. Clear gaps.
Your results identify the controls already working and the practical actions most likely to reduce risk next.
A practical cyber baseline your leadership team can understand
Cyber security assessments often produce too much technical detail and too little direction. This scorecard turns the Essential Eight into plain-English questions about the way your business actually runs IT.
You will see your indicative maturity across all eight strategies, where the largest gaps sit and which improvements should be considered first. “Don’t know” is a valid answer—and often a useful finding in itself.
The eight strategies assessed in one clear scorecard
- 01 Application control
- 02 Patch applications
- 03 Configure macro settings
- 04 User application hardening
- 05 Restrict admin privileges
- 06 Patch operating systems
- 07 Multi-factor authentication
- 08 Regular backups
A consistent starting point for discussing risk, priorities and investment.
What you will walk away with
A clear, honest picture of your cyber maturity—not a generic product pitch or a confusing technical checklist.
Your maturity level
See where you sit across all eight strategies, with an indicative maturity view based on your answers and no artificial rounding up.
Your priority actions
Get a practical list of what to consider first—the higher-impact gaps and useful quick wins that can strengthen your defences fastest.
A board-ready report
Download a polished PDF containing an executive summary, results across all eight strategies and a practical remediation path.
One assessment across all eight strategies
Move beyond vague security conversations and see which controls appear established, which need attention and where further validation may be required.
Application control
Review how approved applications are controlled and unauthorised software is prevented.
Patch applications
Assess how quickly security vulnerabilities in business applications are identified and patched.
Macro settings
Understand how Microsoft Office macro settings are restricted and managed.
User hardening
Review controls that reduce the risk created by browsers, email clients and common applications.
Admin privileges
Assess how privileged access is limited, approved, monitored and separated from everyday use.
Patch operating systems
Review the process for identifying and remediating operating system vulnerabilities.
Multi-factor authentication
Understand where MFA is enforced for users, administrators and important business systems.
Regular backups
Assess whether important data, software and configurations are backed up and recoverable.
How the free assessment works
Three straightforward steps, approximately fifteen minutes and no specialist technical knowledge required.
Answer the questions
Work through plain-English questions about the way your business manages IT. Answer honestly—“don’t know” is a valid response.
See your results
Receive your Cyber Score and indicative maturity view instantly, with a clear breakdown across all eight strategies.
Download your report
Take away a board-ready PDF and, where useful, arrange a free walkthrough with a Stanfield IT security engineer.
A report built for decisions, not another technical dashboard
Your results are organised so leadership can understand the current position, the highest-priority gaps and the next practical actions.
- ✓ Executive summary for management and board discussions
- ✓ Results across each Essential Eight strategy
- ✓ Prioritised improvement opportunities
- ✓ A practical basis for discussing budget and ownership
Before you start
The assessment is designed to be useful even where you do not have every technical answer immediately available.
Do I need technical knowledge to complete the assessment?
No. The questions are written in plain English and focus on how your business manages its technology. Where you are unsure, select “don’t know”. That uncertainty can itself identify an area worth checking.
How long does the Essential Eight scorecard take?
Most organisations should be able to complete the scorecard in approximately 15 minutes, depending on how readily the required information is available.
Will I receive a copy of my results?
Yes. You can view your results immediately and download a board-ready PDF containing your summary, strategy-level results and priority actions.
Is this an official ASD certification or audit?
No. This is an independent self-assessment tool created by Stanfield IT. Results are indicative and based on self-reported answers; they do not replace a formal technical assessment, audit or certification process.
What happens after I complete the assessment?
You can simply keep the report and use it internally. Where you would value expert guidance, you can also arrange a free walkthrough with a Stanfield IT security engineer to discuss the results and sensible next steps.
See where your cyber defences stand today
Complete the free Essential Eight scorecard, identify your highest-priority gaps and leave with a report your leadership team can actually use.
Free assessment · No obligation · Results available immediately