The Australian Cyber Security Centre’s Essential Eight has become one of the most influential cybersecurity frameworks in Australia. Government agencies reference it, consultants recommend it and organisations of every size use it to guide investment decisions. The framework enjoys a strong reputation because it focuses on practical controls that reduce exposure to common attack techniques.
A few years ago I sat down with the owners of a small business that had grown steadily over the previous decade. They had good staff, loyal customers and healthy revenue. Like many business owners, they worried about cybersecurity because they had heard the stories about ransomware, online fraud, privacy breaches and so on. They
I wanted to talk about this because it is incredibly common. In practice, good information security often starts with something much simpler than firewalls or cyber tools. It is knowing what information you actually have, where it lives and who can access it. If you do not know you have it, you cannot secure it.
