Maturity Level 2
Essential Eight Maturity Level 2 — targeted adversaries.
Application Control (ML2)
Prevent execution of unapproved/malicious programs on all workstations and servers.
Patch Applications (ML2)
Apply patches/updates for online services and other apps within timelines based on vulnerability severity.
Configure Microsoft Office Macro Settings (ML2)
Block macros from the internet; only allow vetted macros from trusted locations or digitally signed.
User Application Hardening (ML2)
Disable Flash, web ads, Java, and unneeded browser/Office features; enable ASR rules.
Restrict Administrative Privileges (ML2)
Limit privileged accounts; separate admin and standard accounts; use just-in-time access.
Patch Operating Systems (ML2)
Apply OS patches/updates in line with severity-based timelines; use modern, supported OS versions.
Multi-Factor Authentication (ML2)
Use phishing-resistant MFA for users of internet-facing services and privileged users.
Regular Backups (ML2)
Backup critical data and configs; store securely; test restoration; protect from modification/deletion.