🛡️ Essential Eight Compliance Management (MVP)

What It Does

GetCimple helps Australian businesses track and improve their Essential Eight maturity levels to meet ACSC requirements and reduce cyber risk.

Core Featurest

1. Maturity Assessment

• Simple questionnaire for each Essential Eight control
• Automatic scoring (Level 0-3)
• Visual dashboard showing current state
• Gap analysis against target levels

2. Evidence Management

• Upload screenshots and documents
• Link evidence to specific controls
• Track evidence currency
• One place for audit preparation

3. Progress Tracking

• Monthly progress updates
• Before/after comparisons
• Identify quick wins
• Focus on highest risks

Assessment Process (Quarterly)

1. Update Assessment (2 hours)

2. IT staff answer questions

3. Upload new evidence

4. System calculatest scores

5. Review Results (30 mins)

6. Management reviews dashboard

7. Identify improvement areas

8. Set priorities for next quarter

9. Board Reporting (Automatic)

10. E8 status in director reports
11. Progress since last quarter
12. Risk areas highlighted

The 8 Controls We Track

1. Application Control - Whitelisting
2. Patch Applications - Critical updates
3. Microsoft Office Macros - Blocking malicious code
4. User Application Hardening - Browser security
5. Admin Privileges - Limiting access
6. Patch Operating Systems - OS updates
7. Multi-factor Authentication - Strong login
8. Backups - Ransomware protection

Target Maturity Levels

• Government Suppliers: Level 2+ mandatory
• Critical Infrastructure: Level 3 recommended
• General Business: Level 1 minimum

Business Value

• Meet ACSC compliance requirements
• Reduce ransomware risk by 85%+
• Clear roadmap for improvement
• Evidence ready for audits

MVP Limitations

• Manual evidence upload (no API integration yet)
• Quarterly assessments (not real-time)
• Standard ACSC framework only

Good enough to demonstrate compliance and guide improvements.