Summary
- ASD has evolved the Essential Eight into ASD Essentials
- Effectiveness ratings replace maturity levels
- You need to demonstrate effectiveness, not just deployment
- The scope is wider, including executive accountability
Solutions available through OneDot61 cover the ASD Essentials areas, for your organisation or your clients.
New ASD Essentials Released
On 15 October 2026, ASD launched ASD Essentials, an evolution of the Essential Eight. Its first three chapters cover enterprise IT, operational technology and cloud. It gives Commonwealth entities, critical infrastructure owners and operators, and large organisations practical, threat-informed and prioritised measures to strengthen their cyber defences and better protect critical business functions and systems.
Nothing changes for your obligations yet. ASD will keep both frameworks in place during the transition, and until regulators announce changes, you should keep meeting your current requirements.
Effectiveness Ratings Replace Maturity Levels
There's no target maturity level to pick any more. Each action is rated in each domain it applies to as not assessed, not effective, partially effective or fully effective. Priority phases tell you which domains to work on first, not how good you are. Your current maturity level won't automatically convert into an Essentials rating, so a gap analysis is the place to start.
You Need to Show It Works
As ASD puts it, "deployment alone does not demonstrate effectiveness." Having a control in place is no longer enough. You'll need evidence that it keeps working, such as test results, monitoring records, drift reports and restore tests. Your Essential Eight evidence still counts as long as it's current.
The Scope Is Wider
ASD Essentials for enterprise IT adds areas the Essential Eight never assessed:
- a Governance and culture domain, including executive accountability, supplier assurance and AI accountability
- a dedicated Visibility and response domain
- new principles such as content filtering, awareness training and supply chain security.
Read ASD's Guidance
That's the short version. ASD's Transitioning from the Essential Eight guidance shows how each Essential Eight strategy maps across, what Maturity Level Two and Three organisations can reuse, the recommended transition pathway and the common transition pitfalls. If you've invested in the Essential Eight, it's worth reading in full before you plan your next step.
Contact OneDot61
When you're ready, talk to OneDot61 about solutions that help you produce evidence for your ASD Essentials priorities, for your organisation or your clients.
