1Enforce MFA on IdP admins, remote access, and privileged roles first.
2Remove standing local admin where practical and name a revoke owner.
3Schedule a measured restore test before treating backups as Essential Eight complete.
4Do not invent an ACSC Maturity Level from a self-assessment score.
Step 1 of 2: Prevent controls
Step 1 of 3: Prevent
1
Prevent
4 questions
2
Maintain
4 questions
3
Results
Plan before contact
1. Prevent controls
Application control, macros, hardening, and admin privilege hygiene.
Tool FAQ
No. Workflow readiness, free actions, and next steps render in your browser before any contact capture. Named-recipient consent is optional and only offered after results if you choose to share with a vendor.
Never. Enterprise tools use range and category answers only. Do not paste privileged passwords, private keys, API keys, exact IP lists, authentication codes, or confidential diagrams.
No. It is a self-reported hygiene snapshot only. It does not issue Maturity Level 1, 2, or 3, and it is not an auditor or ACSC assessment. Finish MFA, privilege hygiene, and a measured restore test before buying compliance automation.
No. The live figure is a workflow readiness estimate from your answers. Product editorialScore stays N/Pub until evidence packs and reviewer gates clear. Public partner pages are not program acceptance.
Final verdict (claim-safe)
Treat this workflow as an unverified planning scaffold, not a scored shortlist or purchase recommendation. The live figure is a workflow readiness estimate only. Product editorialScore stays N/Pub. Finish free and built-in controls first. Public partner pages do not equal program acceptance. This route stays intentionally noindex until evidence and editorial gates clear.