Essential 8 maturity self-assessment — where does your business stand?
Take Key IT's free Essential 8 self-assessment. See your baseline maturity level against the ACSC framework, plus which controls to fix first.
Most Melbourne businesses have no clear idea how exposed they are. This free Essential 8 self-assessment gives you a baseline in minutes: a maturity level against the ACSC framework, which controls are strongest, and which are dragging your score down. No cost, no obligation, no sales pitch — just a clear starting point.
How the assessment works
You answer a short set of questions — three per Essential Eight control, mapped to Maturity Levels One, Two and Three. Because the ACSC sets your overall maturity by your weakest control, the result reflects your real-world exposure, not an average that hides the gaps.
What you get
An overall baseline maturity level
across the Essential Eight.
Your strongest controls
where you are already doing well.
The controls dragging your score down
where to focus first.
A clear next step
book a 30-minute review to turn the result into a plan.
What it is and is not
This is a self-assessment to orient you, not a formal audit. It is deliberately honest and uses ACSC language — including "does not yet meet Level One" rather than pretending a failing control is fine. For a verified assessment and a roadmap, the next step is our Essential 8 service or a free cybersecurity health check.
Frequently asked questions
How long does the assessment take?
A few minutes. It is a short, plain-English questionnaire — no technical jargon required.
Is it really free?
Yes, completely free and without obligation. You are not required to become a client to get your result.
How accurate is a self-assessment?
It gives a solid baseline based on your answers. A formal assessment by our team verifies it in detail, but the self-assessment is an honest, useful starting point.
What happens after I get my result?
You can act on it yourself, or book a free 30-minute review where we walk through it and outline how to lift your weakest controls.
Do I have to give my details to see the result?
You can see your result without a hard gate. Sharing your email lets us send a copy and a recommended next step, but it is optional.
What if I score poorly?
That is exactly what the tool is for — to find the gaps before an attacker does. A low score is a starting point, not a judgement, and every control can be lifted.
Take the assessment
Get your Essential 8 baseline now — or call 1300 053 948 to book a 30-minute review.
Related services & guides
150+ Melbourne organisations, looked after every day
From manufacturing and healthcare to finance, body corporate and professional services — a few of the businesses whose IT and security we run every day.
Book your free IT & Cyber Security Review
See exactly where your IT and security stand, and what to fix first. No jargon, no obligation.