I just downloaded and reviewed the Essential 8 from the Australian Signals Directorate. I'm in the USA, so I can't use it in any regulated organization, but this is a high quality #cybersecurity plan. Well done, Australia.
https://www.cyber.gov.au/resources-business-and-government/essential-cyber-security/essential-eight
@paxterrarum Perhaps software supply chain inspection/security should be added to the list.
Follow
@peterquirk Agreed. Keep in mind what that the "Essential Eight" isn't the entire scope of the ASD's cybersecurity guidance. Here's a page from the Table of Contents of their
Information Security Manual. They do address that very important aspect of a comprehensive cybersecurity program.
