{"id":21261,"date":"2024-01-11T09:49:20","date_gmt":"2024-01-11T09:49:20","guid":{"rendered":"https:\/\/www.avolutionsoftware.com\/?p=21261"},"modified":"2024-05-13T11:35:01","modified_gmt":"2024-05-13T10:35:01","slug":"essential-eight-cybersecurity-framework-for-architects","status":"publish","type":"post","link":"https:\/\/www.avolutionsoftware.com\/news\/essential-eight-cybersecurity-framework-for-architects\/","title":{"rendered":"The Essential Eight Cybersecurity Framework for Enterprise Architects"},"content":{"rendered":"

Guide to Strategies for Mitigating Cybersecurity Incidents<\/strong><\/span><\/em><\/h2>\n

Threats to an organization\u2019s cybersecurity present one of the chief challenges for modern enterprises. Cybersecurity attacks on Australian businesses more than doubled between the 2019-20 and 2021-22 financial years, as reported by the Australian Bureau of Statistics.<\/p>\n

An important element of cyber defences is a robust enterprise architecture<\/a>, and cybersecurity frameworks<\/a>, providing a scaffold for successful security practices. The Essential Eight cybersecurity framework stands out for its targeted technical controls. It offers three distinct maturity levels, providing enterprises with a clear roadmap towards progressively stronger defences.<\/p>\n

What is the Essential Eight Framework?<\/strong><\/h2>\n

Developed by the Australian Signals Directorate<\/a> \u2013<\/span> an Australian federal government agency – the Essential Eight is a cybersecurity framework that sets out to assist organizations in protecting themselves against cyber threats.<\/p>\n

\"\"<\/p>\n

The framework outlines a series of mitigation strategies and principles designed to safeguard Microsoft Windows-based internet-connected networks. The strategies detail a minimum set of preventative measures required to achieve adequate protection.<\/p>\n

The eight controls identified are designed to complement each other, with organizations recommended master a maturity level before progressing onto the next.<\/p>\n

Essential Eight and Other Cybersecurity Frameworks<\/strong><\/h2>\n

The Essential Eight\u2019s streamlined approach provides an accessible starting point to cybersecurity in comparison to other frameworks, such as the NIST Cybersecurity Framework<\/a>\u00a0(from the US National Institute of Standards Technology). While NIST features 108 Mitigation Strategy Categories and 1,177 Security Controls, the Essential Eight framework lists 8 Categories and 69 Controls.<\/p>\n

With targeted security controls, focused preventative measures and condensed mitigation strategies, the Essential Eight offers an easier entry point for organizations.<\/p>\n

Implementing Essential Eight with Your Enterprise Architecture<\/strong><\/h2>\n

The Essential Eight offers a staged approach to incorporating cybersecurity across an organization, allowing enterprises to steadily ramp up their defences. The framework defines four maturity levels, ranked from zero to three. These levels are aimed at progressively assessing, monitoring, and improving the framework\u2019s application.<\/p>\n

How can an enterprise architecture team apply the framework?<\/p>\n