--- title: "Essential Eight Checklist | Free Self-Assessment | StartCloud" description: "Free Essential Eight self-assessment checklist for Australian businesses. 24 plain-English questions covering MFA, patching, backups, and more. No email required." lang: en json-ld: | [ { "@context": "https://schema.org", "@type": [ "LocalBusiness", "ProfessionalService" ], "@id": "https://startcloud.au/#business", "name": "StartCloud", "legalName": "Start Technologies Pty Ltd", "alternateName": "StartCloud Australia", "identifier": { "@type": "PropertyValue", "propertyID": "ABN", "value": "17 676 121 449" }, "slogan": "Go Beyond", "description": "StartCloud is Perth's cybersecurity-first AI MSP: managed IT, Essential Eight security, Microsoft 365 and cloud, networking, and practical AI for Australian businesses with 5 to 50 staff.", "url": "https://startcloud.au", "logo": "https://startcloud.au/og-image.png", "image": "https://startcloud.au/og-image.png", "telephone": "+61862850001", "email": "web@startcloud.com.au", "priceRange": "$$", "currenciesAccepted": "AUD", "paymentAccepted": "Invoice", "foundingDate": "2023", "contactPoint": { "@type": "ContactPoint", "telephone": "+61862850001", "contactType": "customer service", "areaServed": "AU", "availableLanguage": "English" }, "address": { "@type": "PostalAddress", "streetAddress": "Ground Floor West, 6 Gibberd Road", "addressLocality": "Balcatta", "addressRegion": "WA", "postalCode": "6021", "addressCountry": "AU" }, "geo": { "@type": "GeoCoordinates", "latitude": -31.8648813, "longitude": 115.8095638 }, "openingHoursSpecification": [ { "@type": "OpeningHoursSpecification", "dayOfWeek": [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday" ], "opens": "07:00", "closes": "16:30", "description": "General support hours" }, { "@type": "OpeningHoursSpecification", "dayOfWeek": [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday", "Sunday" ], "opens": "00:00", "closes": "23:59", "description": "Security Operations Centre (SOC) with 24/7/365 threat monitoring" } ], "areaServed": [ { "@type": "City", "name": "Perth" }, { "@type": "State", "name": "Western Australia" }, { "@type": "Country", "name": "Australia" } ], "serviceArea": { "@type": "GeoCircle", "geoMidpoint": { "@type": "GeoCoordinates", "latitude": -31.8648813, "longitude": 115.8095638 }, "geoRadius": "50000" }, "knowsAbout": [ "Cybersecurity", "Managed Security Services", "Essential Eight", "Microsoft 365", "Microsoft Azure", "IT Support", "Network Security", "Disaster Recovery", "Compliance Management", "Microsoft Copilot", "AI Readiness", "AI Governance", "AI Agent Development" ], "hasOfferCatalog": { "@type": "OfferCatalog", "name": "IT and Cybersecurity Services", "itemListElement": [ { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Cybersecurity Services", "url": "https://startcloud.au/cybersecurity" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Managed IT Services and Support", "url": "https://startcloud.au/technology" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Microsoft 365 and Cloud Solutions", "url": "https://startcloud.au/cloud" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Managed Networking", "url": "https://startcloud.au/networking" } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "AI and Automation", "url": "https://startcloud.au/ai" } } ] }, "sameAs": [ "https://www.linkedin.com/company/startcloudau", "https://www.facebook.com/startcloudaus/", "https://www.cloudtango.net/providers/12375/startcloud", "https://clutch.co/profile/startcloud", "https://abr.business.gov.au/ABN/View?abn=17676121449", "https://www.yellowpages.com.au/balcatta-wa/bpp/startcloud-581735301", "https://www.truelocal.com.au/balcatta-wa/tlp/startcloud-581735301", "https://www.google.com/maps/place/StartCloud/@-31.8648767,115.8069889,739m/data=!3m2!1e3!4b1!4m6!3m5!1s0x2a32a5b5d9e864b5:0x9f02690968f0e50c!8m2!3d-31.8648813!4d115.8095638!16s%2Fg%2F11vzbgtytj" ] }, [ { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://startcloud.au/" }, { "@type": "ListItem", "position": 2, "name": "Cybersecurity", "item": "https://startcloud.au/cybersecurity" }, { "@type": "ListItem", "position": 3, "name": "Essential Eight", "item": "https://startcloud.au/cybersecurity/essential-eight" }, { "@type": "ListItem", "position": 4, "name": "Checklist", "item": "https://startcloud.au/cybersecurity/essential-eight-checklist" } ] }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "What is an Essential Eight self-assessment?", "acceptedAnswer": { "@type": "Answer", "text": "A self-assessment is a quick way to check your business against the eight mitigation strategies recommended by the Australian Cyber Security Centre. It highlights gaps in areas like patching, MFA, admin privileges, and backups before an attacker or insurer finds them." } }, { "@type": "Question", "name": "Is this checklist the same as a formal Essential Eight assessment?", "acceptedAnswer": { "@type": "Answer", "text": "No. This checklist is a starting point based on Maturity Level One expectations. A formal assessment verifies each control with evidence and gives you a defensible maturity rating, which insurers and larger customers increasingly ask for." } } ] }, { "@context": "https://schema.org", "@type": "WebPage", "url": "https://startcloud.au/cybersecurity/essential-eight-checklist", "speakable": { "@type": "SpeakableSpecification", "cssSelector": [ "#e8c-hero h1", "#e8c-hero p" ] } } ] ] --- [![StartCloud](/assets/StartCloud-Logo-ByZE1kzP.svg "StartCloud: Cybersecurity-First Managed IT Services Perth")](/ "StartCloud | Managed IT Services Perth") - Cybersecurity - AI Solutions - Cloud - Technology - Networking - Explore [Contact Us](/contact "Contact StartCloud, Perth IT Support") Open menu A free interactive Essential Eight self-assessment checklist from StartCloud. 24 plain-English questions across the eight ACSC mitigation strategies, aligned to Maturity Level One expectations: application control, patching applications, Microsoft Office macro settings, user application hardening, restricting admin privileges, patching operating systems, multi-factor authentication, and regular backups. Results include practical next steps. No email address is required to use the checklist. 1. [Home](/) 2. [Cybersecurity](/cybersecurity) 3. [Essential Eight](/cybersecurity/essential-eight) 4. Checklist Free Self-Assessment # Essential Eight Self-Assessment Checklist Twenty-four plain-English questions to see how your business measures up against Australia's baseline cyber security framework. No email address required. Tick what's true for your business today and get an honest picture in about five minutes. 0 of 24 in place Print or save as PDF ## 1\. Application Control Stop unapproved programs from running on your computers and servers. - We keep a list of the applications our business actually needs. - Staff computers block programs that are not on the approved list. - Someone reviews and approves new software before it is installed. ## 2\. Patch Applications Keep everyday software like browsers and Office up to date. - Security updates for key applications are applied within two weeks, or 48 hours for serious flaws. - We use a tool or service that tells us when application updates are missing. - We no longer use applications the vendor has stopped supporting. ## 3\. Configure Microsoft Office Macros Macros are a common way for malware to sneak in via email attachments. - Macros are blocked for staff who do not need them. - Macros in files downloaded from the internet are blocked. - Macro security settings cannot be changed by staff themselves. ## 4\. User Application Hardening Switch off risky features in browsers and document readers. - Our web browsers do not run Java or web advertisements by default. - Internet Explorer 11 is not used to browse the web. - Browser security settings are managed centrally, not by each user. ## 5\. Restrict Administrative Privileges Limit the accounts that can change systems, since attackers target them first. - Day-to-day work is done with standard accounts, not admin accounts. - Requests for admin access are checked and approved before being granted. - Admin accounts cannot browse the web or read email. ## 6\. Patch Operating Systems Keep Windows, macOS, and server systems up to date. - Operating system updates are applied within two weeks, or 48 hours for serious flaws. - We can see which computers are missing updates at any time. - We no longer run operating systems the vendor has stopped supporting, such as Windows 10 after October 2025. ## 7\. Multi-Factor Authentication A second login step stops most password-based attacks cold. - MFA is required for email and Microsoft 365 or Google Workspace accounts. - MFA is required for remote access such as VPNs and remote desktops. - MFA is required for any online services that hold sensitive business data. ## 8\. Regular Backups Reliable backups are what stand between ransomware and a ransom payment. - Important data, settings, and systems are backed up automatically. - We have actually tested restoring from a backup in the last 12 months. - Backups cannot be modified or deleted by everyday user accounts. ## Plenty of opportunity, and that's okay. Most businesses start here. The Essential Eight is designed to be implemented progressively, so you don't need to fix everything at once. Start with MFA and backups, then work through the rest. [Book a Formal E8 Assessment](/contact)[Learn About the Framework](/cybersecurity/essential-eight) Not sure how to answer some of these? Work through our free [Essential Eight training pathway](/learn/essential-eight-for-australian-business). Eight short modules covering what each control means, what the maturity levels actually require, and how to prove where you stand. Keep reading: our [plain-English compliance guide for Perth SMEs](/resources/essential-eight-compliance-guide-perth-businesses), a [deeper look at each of the eight strategies](/resources/understanding-essential-eight-guide-australian-businesses), and [why cyber insurance is not a substitute for controls](/resources/why-cyber-insurance-not-substitute-cybersecurity). ![StartCloud](/assets/StartCloud-Logo-ByZE1kzP.svg "StartCloud: Cybersecurity-First Managed IT Services Perth") Cybersecurity-led IT for Australian businesses. We manage security, compliance, and modern IT environments, so risk is governed, not guessed. Ground Floor West, 6 Gibberd Road, Balcatta WA 6021 [08 6285 0001](tel:+61862850001 "Call StartCloud on 08 6285 0001") Serving Perth businesses from Balcatta, Western Australia. ![Microsoft Solutions Partner - Modern Work](/assets/microsoft-solutions-partner-DqvNMv91.png "Microsoft Solutions Partner: Modern Work") ### Services - [Cybersecurity](/cybersecurity "Cybersecurity Services Perth | StartCloud") - [AI Solutions](/ai "AI & Automation Services Perth | StartCloud") - [Cloud](/cloud "Cloud Services Perth | StartCloud") - [Technology](/technology "IT Services and Support | StartCloud") - [Networking](/networking "Business Networking Perth | StartCloud") - [Packages](/packages "IT Support Packages Perth | StartCloud") ### Company - [About](/about "About StartCloud, Perth IT Support Team") - [Company Facts](/facts "StartCloud Company Facts | Perth Cybersecurity-First AI MSP") - [Resources](/resources "IT Resources & Guides | StartCloud Perth") - [Service Areas](/it-support-perth "IT Support Perth | StartCloud") - [Contact](/contact "Contact StartCloud, Perth IT Support") ### Locations - [All Service Areas](/locations "Perth IT Support Areas | StartCloud") - [IT Support Perth](/it-support-perth "IT Support Perth | StartCloud") - [Cybersecurity Perth](/cybersecurity-perth "Cybersecurity Perth | StartCloud") - [MSP Perth](/managed-service-provider-perth "Managed Service Provider Perth | StartCloud") - [Industries We Serve](/industries "IT Support by Industry Perth | StartCloud") © 2026 Start Technologies Pty Ltd trading as StartCloud. All rights reserved. ABN 17 676 121 449 [](https://www.linkedin.com/company/startcloudau "StartCloud on LinkedIn")[](https://www.facebook.com/startcloudaus/ "StartCloud on Facebook")[](https://www.google.com/maps/place/StartCloud/@-31.8648767,115.8069889,739m/data=!3m2!1e3!4b1!4m6!3m5!1s0x2a32a5b5d9e864b5:0x9f02690968f0e50c!8m2!3d-31.8648813!4d115.8095638!16s%2Fg%2F11vzbgtytj "StartCloud on Google") [Terms of Service](/terms-of-service "Terms of Service | StartCloud")| [Privacy Policy](/privacy-policy "Privacy Policy | StartCloud")| [Modern Slavery Policy](/modern-slavery-policy "Modern Slavery Policy | StartCloud")| [Cookie Policy](/cookie-policy "Cookie Policy | StartCloud") StartCloud Assistant Online G'day! 👋 I'm the StartCloud Assistant. How can I help you today? Tell me about your servicesBook a discovery callI need IT support Find Your Solution