essential-eight

An Essential Eight compliance audit maps repository controls to the ACSC's eight mitigation strategies. It generates per-control evidence, identifies gaps, and provides remediation guidance to support IRAP assessments and compliance reporting.

To generate SSP and SoA artefacts for an IRAP assessment, run an Essential Eight audit against your repository. This cross-references ISM mappings and exports evidence-backed artefacts suitable for compliance documentation.

Essential Eight compliance auditing supports Windows, macOS, and Linux deployments. It provides worked baselines, examples, and templates to help assess systems across these platforms for IRAP and ISM alignment.

To assess ISM control mappings alongside Essential Eight maturity, use an auditing skill that scopes assessments to the eight strategies. It cross-references ISM mappings, summarizes overall maturity, and lists primary sources for compliance.

Yes, you can use repository code to automate Essential Eight evidence collection and gap analysis. The skill identifies existing controls, maps them to target maturity levels, and generates remediation guidance for missing evidence.

The best way to prepare for an ACSC Essential Eight maturity assessment is to audit your repository controls. This identifies gaps against target maturity levels, provides remediation guidance, and prepares exportable SSP/SoA artefacts.