Application control
Only approved applications can run, blocking malware and unapproved software.
Since 2015
ISO 27001
5.033 Google reviews
7am to 6pm
What is the Essential Eight?
Australia’s baseline for cyber defence
The Essential Eight is a set of mitigation strategies published by the Australian Signals Directorate (ASD) to help organisations protect their systems against a wide range of cyber threats. Together they make it much harder for attackers to get in, limit the damage if they do, and help you recover quickly.
It is required for many Australian Government agencies, and increasingly expected by government buyers, larger clients and cyber insurers. For most small and medium businesses, it is the most practical place to start.
Independently certified
We understand the importance of protecting data, and we set ourselves apart through our ISO 27001 certification and SMB1001 Gold (Level 3) certification with CyberCert. From safeguarding company data to client information, we’re dedicated to upholding the highest standards of information security.
The eight strategies
What the Essential Eight covers
Patch applications
Security updates for applications are applied quickly, especially for internet-facing software.
Microsoft Office macros
Macros are blocked unless they come from trusted, approved sources.
User application hardening
Web browsers and applications are configured to block risky content and features.
Restrict admin privileges
Admin access is limited to the people and tasks that genuinely need it.
Patch operating systems
Operating systems are kept up to date and unsupported versions are replaced.
Multi-factor authentication
A second check protects logins to email, remote access and important systems.
Regular backups
Important data and settings are backed up, protected and tested so you can restore them.
Maturity levels
Measuring how well each control works
Each strategy is assessed against maturity levels that reflect how well it protects you against increasingly capable attackers. Many small and medium businesses start by targeting Maturity Level One, then work towards Level Two.
Not yet aligned
Weaknesses exist that leave systems open to common, opportunistic attacks.
Partly aligned
Protection against opportunistic attackers using widely available tools and techniques.
Mostly aligned
Protection against more skilled attackers who invest more time and effort in targeting you.
Fully aligned
Protection against adaptive, highly capable attackers who target specific organisations.
How we help
From assessment to ongoing compliance
We take you from knowing where you stand to keeping your controls working, with clear reporting at every step.
- Essential Eight assessment against your target maturity level
- Clear, prioritised gap report and roadmap
- Implementation by our engineers, including application control
- Ongoing patching, monitoring and maturity reporting
- Alignment with SMB1001 and ISO 27001 where you need certification
Our services
We can also help with
Why Work With Us
We don’t just fix problems — we keep your systems running the way they should. Our IT support team blends enterprise-level expertise with a straightforward, human approach. We care about your uptime, your people, and your peace of mind. With transparent pricing, specialist advice, and zero jargon, we make sure technology works for you — not against you. When you need dependable IT and cyber security that just works, Insource IT.
Contact Us →
Testimonials
What our clients say
5.0
33 Google reviews
The entire Insource IT team are so helpful, approachable, non-judgemental, and most importantly, knowledgeable. They will go out of their way to help you, no matter the issue.
Insource IT have your business’s best interest at heart. They’ll go the extra mile to explain where your IT budgets should be spent to keep you up to date with your industry’s security, compliance and IT standards.
Wonderful team! They are always pleasant and easy to reach, and masters at what they do. Highly recommend to anyone needing help in IT.
Latest insights
All insights →
