The Essential Eight consist of eight key strategies designed to block, limit and recover from cyber attacks. Each element addresses a different weakness that cybercriminals frequently exploit.
The main components are:
- Application control: Allows only approved software to run.
• Patching applications: Ensures programs are updated to fix known vulnerabilities.
• Configuring Office macros: Blocks untrusted macros often used to deliver malware.
• Patching operating systems: Keeps devices secure against known exploits.
• Restricting administrative privileges: Limits high-risk access that attackers target.
• Multi-factor authentication: Adds a second verification step to prevent account takeover.
• Regular backups: Protects data and supports recovery after ransomware or system failure.
• User application hardening: Disables risky features in common applications.
These elements work together to form a layered defence. Some strategies prevent attackers from entering the system, others limit the damage they can cause and backups ensure the business can recover quickly. They are designed to be practical, cost effective and accessible for organisations of all sizes.
