// APAC Standards
Essential Eight Compliance Software
The ACSC Essential Eight is a prioritised set of mitigation strategies designed to make it harder for adversaries to compromise systems. Mandatory for Australian government and widely adopted by private sector.
Framework at a glance
Short name
Essential Eight
Version
2023
Category
APAC Standards
Controls
40
What Essential Eight covers
40 controls across 5 domains — every one tracked, owned and evidenced in Cyber Horizon.
Protect
29 controls- E8-1.1 Application Control — Level 1
- E8-1.2 Application Control — Level 2
- E8-1.3 Application Control — Level 3
- E8-2.1 Patch Applications — Level 1
- E8-2.2 Patch Applications — Level 2
Recover
3 controls- E8-8.1 Regular Backups — Level 1
- E8-8.2 Regular Backups — Level 2
- E8-8.3 Regular Backups — Level 3
Identify
5 controls- E8-M1 Essential Eight Maturity Assessment
- E8-M2 Vulnerability Scanning — Weekly
- E8-M8 Supply Chain Security
- E8-M9 Annual Penetration Testing
- E8-M16 IRAP Assessment Readiness
Detect
2 controls- E8-M3 Incident Detection and Response
- E8-M4 Logging and Monitoring
Govern
1 controls- E8-M10 Board Reporting on Cyber Posture
How Cyber Horizon automates Essential Eight
Every Essential Eight control lives in a shared control library, crosswalked to the other frameworks you run — evidence collected once counts everywhere it applies.
Evidence is collected automatically from your connected tools, with owners, review cadences and gaps tracked continuously instead of at audit time.
Audit packs generate on demand, and the risk register, vendor risk and threat intelligence sit in the same platform — one evidence trail across your whole programme.
Frequently asked questions
What is Essential Eight?
The ACSC Essential Eight is a prioritised set of mitigation strategies designed to make it harder for adversaries to compromise systems. Mandatory for Australian government and widely adopted by private sector.
How many controls does Essential Eight have?
Essential Eight (2023) has 40 controls in Cyber Horizon's catalogue, organised across 5 domains.
How does Cyber Horizon help with Essential Eight?
Cyber Horizon maps Essential Eight into a shared control library alongside every other framework you run, so evidence collected once counts towards Essential Eight and everything else it overlaps with. Controls, evidence status and audit packs live in one place, with automated collection from your connected tools.
More APAC Standards frameworks
See Essential Eight mapped to your environment
Start with the free 20-question readiness check — no signup — or get a personal walkthrough of Essential Eight in Cyber Horizon.