Answer honestly for your whole organisation. The eight controls below are the ACSC Essential Eight mitigation strategies, described in plain English for care providers. Pick the option that best matches where you are today.
You hold sensitive client and health records. A single breach can trigger the Notifiable Data Breaches scheme under the Privacy Act 1988, harm the people in your care, and put your NDIS registration or aged care standing at risk - on top of the reputational and financial cost of downtime.
Get your full breakdown & personalised action plan
See your score for each of the eight controls, the 2–3 weakest areas to fix first, and a personalised Essential Eight uplift plan for your organisation.
This is a self-assessment provided for guidance only, based on the ACSC (Australian Cyber Security Centre) Essential Eight mitigation strategies and Maturity Model. It is not an audit, penetration test, or formal certification, and does not represent official ACSC or ASD assessment or endorsement. Results reflect your own answers and should be validated by a qualified assessor. Care providers should also confirm their obligations under the Privacy Act 1988, the Notifiable Data Breaches scheme, the NDIS Practice Standards and applicable aged care requirements.