Attack-based evidence for ML2, before your next assessment
As a Commonwealth agency, you must demonstrate Essential Eight Maturity Level 2 across your corporate IT environment, with maturity reported annually and published in aggregate. The PSPF also requires a cyber security strategy and uplift plan aligned to the Guiding Principles to Embed a Zero Trust Culture. NodeZero provides attack-based evidence for many of the ML2 controls and the technical uplift your strategy commits to.
Your specific challenges
Self-assessments have not always held up
ANAO reported in 2021 (Auditor-General Report No. 32 2020–21) that only 24% of the non-corporate Commonwealth entities it had audited since 2014 were compliant with the mandatory Top Four, and found entities that self-assessed full implementation that did not hold up. Controls are documented faster than they are validated.
Zero trust is now in the policy
PSPF requires your cyber security strategy and uplift plan to follow the Guiding Principles to Embed a Zero Trust Culture. The strategy is a document; whether access controls, segmentation and privilege boundaries hold is something only testing can show.
Reporting pressure
Your maturity is reported annually, published in aggregate, and probed by ANAO performance audits that name entities. A pentest from two years ago cannot keep the posture you report current.
Built for your situation
Attack-based evidence for ML2
Run NodeZero across your environment. Get findings mapped against all 8 Essential Eight strategies, with attack-based evidence where NodeZero ran the attack. The coverage kit flags the controls that need separate evidence.
Test the controls behind your strategy
NodeZero starts as an attacker with no implicit trust. If access is granted without authentication, if lateral movement is possible, if privileges can be escalated, you see exactly where access controls, segmentation and privilege boundaries break down.
Continuous compliance evidence
Quick Verify enables re-testing at no extra cost. Before/after reports demonstrate measurable improvement between reporting cycles.
Build your ML2 evidence
See how NodeZero maps to all 8 Essential Eight strategies and supports your PSPF cyber security strategy