The November 2023 update of the Australian Signals Directorate (ASD) Essential Eight Maturity Model brings important improvements in cybersecurity.
Key changes include:
- Faster patching for critical vulnerabilities and shorter timeframes for high-risk applications
- Multi-factor authentication requirements are strengthened, now demanding both ‘something users have’ and ‘something users know.’
- Processes for managing administrative privileges and controls in the cloud are improved.
- Changes in how applications are controlled and in Microsoft Office macros aim to make them more secure.
- Making user applications more secure involves getting rid of Internet Explorer 11 and sticking to strict guidelines.
- The emphasis on regular backups highlights the importance of securing critical data.
- Changes specific to maturity levels highlight the need for quick responses, secure login methods, and improved security measures.
- The update also highlights the importance of keeping event logs in one central location and aligning with global standards, urging immediate action to enhance cybersecurity defenses.
In conclusion, the ASD Essential Eight Maturity Model update makes cybersecurity stronger by focusing on quick responses, better login security, and improved safety practices at different levels.
