Eight questions, about two minutes. No email address, no sign-up, nothing emailed to you afterwards. You get the answer on this page and that's it.
In New Zealand? The Essential Eight is an Australian
framework. The New Zealand counterpart is the NCSC's 10 Critical Controls,
and it has no maturity levels. Eight of the ten cover the same ground as
the questions below, so this is still a useful two minutes — just don't
take the result to a New Zealand auditor as a maturity rating, because
there is no such thing there.
More on how the two compare.
What this is and isn't. This gives you an indicative read
based on what you tell it. A real assessment tests what's configured rather
than what someone believes is configured, and the two are different
surprisingly often. Treat this as a conversation starter.
Your indicative result
What we'd look at first
Want the version that's actually tested?
A real gap assessment checks the configuration rather than the
recollection, and gives you evidence for each finding plus a costed plan
in priority order. It's part of the free IT review.
