← Back to Strategic services Strategic

Your enterprise clients are pushing Essential Eight requirements down their supply chains.

Westpac, CBA, BHP — and the government contracts and defence primes that sit alongside them — are making Essential Eight maturity a condition of doing business. If a questionnaire or procurement requirement landed on your desk, this is how you meet it.

What's involved

Moving from your current Essential Eight maturity to your target level requires systematic implementation across all eight strategies. This is not a policy overlay — it involves technical control changes, process adjustments, and ongoing verification that the controls are operating as intended.

We work with your MSP to plan and implement the technical controls — application control, patching, macro settings, user application hardening, admin privilege restriction, MFA, and backups — while building the oversight layer that ensures they remain effective and evidenced over time.

The roadmap is staged by strategy and prioritised by risk. We build toward your target maturity level in the sequence that makes the most sense for your environment and timeline, not the consultant's preference.

Deliverables

  • Implementation roadmap prioritised by risk and effort
  • Technical implementation specifications for each strategy
  • MSP coordination and implementation oversight
  • Evidence collection framework for each maturity level
  • Progress reporting against target maturity levels
  • Post-implementation maturity verification assessment
  • Ongoing maintenance guidance and review schedule

Business benefits

  • Meet the supply chain security requirement your client or contract is asking for
  • Evidence pack that stands up to client, auditor, and government scrutiny
  • Systematic risk reduction across the most impactful mitigation strategies
  • Clear accountability: oversight with Cybercraft, technical implementation with your MSP

Engagement process

Baseline assessmentCurrent maturity assessed per strategy if not already done via a Getting Started assessment.
Roadmap designImplementation plan developed with your MSP, prioritised by risk and sequenced to minimise disruption.
Implementation oversightTechnical controls implemented by your MSP with our independent oversight. Each strategy verified against maturity requirements.
Evidence collectionEvidence pack built progressively as controls are implemented and verified.
Maturity verificationIndependent assessment confirms target maturity has been achieved. Evidence pack finalised for client or government submission.
Meet your client requirements

A client questionnaire landed on your desk?

Tell us who is asking, what maturity level they need, and what your current state looks like. We will give you a straight answer on what it takes to meet the requirement.

Meet your client requirements

Kaurna Acknowledgement

We acknowledge and pay our respects to the Kaurna people, the traditional custodians of the ancestral lands on which we work. We acknowledge the deep feelings of attachment and relationship of the Kaurna people to country and we respect and value their past, present and ongoing connection to the land and cultural beliefs.

Kaurna Acknowledgement

We acknowledge and pay our respects to the Kaurna people, the traditional custodians of the ancestral lands on which we work. We acknowledge the deep feelings of attachment and relationship of the Kaurna people to country and we respect and value their past, present and ongoing connection to the land and cultural beliefs.