Compliance
What is the Essential Eight checklist for an engineering team?
An engineer's checklist for the Australian Essential Eight: application control, patching, macros, hardening, admin rights, MFA and backups by level.
Oct 18, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCompliance
Essential Eight after the assessment: how to stay at your level
An Essential Eight result is a snapshot. Hold your target maturity with monitored patch windows, admin reviews, rule reviews, restore tests and exceptions.
Oct 18, 20265 min read
Compliance
Essential Eight scoping: what to include before you start
Scope the Essential Eight before you patch anything: choose the systems, pick one target maturity level, and record every exclusion with a reason.
Oct 18, 20266 min read
Compliance
Essential Eight assessment, how to prepare your evidence
Prepare for an Essential Eight assessment by picking a target maturity level, testing each strategy on real systems and saving dated proof. Steps inside.
Oct 18, 20265 min read
Compliance
Which policies and documents does the Essential Eight need?
The Essential Eight is mostly technical, but assessors read documents too. Draft eight short standards, an exceptions register, scope notes, reviews.
Oct 18, 20265 min read
Compliance
Essential Eight first timer mistakes: levels, exceptions and scope
Common Essential Eight errors: uneven levels, aiming too high, informal exceptions, wrong scope and unrestored backups. See what ASD advises instead.
Oct 18, 20265 min read
Compliance
Essential Eight: doing it with spreadsheets, and when to automate
Track the Essential Eight in spreadsheets with a strategy by system matrix, then see where it breaks and when to automate patching, access and backups.
Oct 18, 20265 min read
Compliance
Essential Eight 12 week implementation calendar for small teams
A 12 week planning calendar to reach Essential Eight Maturity Level One: scope, inventory, one strategy at a time, then testing and an assessment report.
Oct 18, 20265 min read
Compliance
Can you run DORA on spreadsheets, and when should you automate?
A small financial entity can start DORA on spreadsheets, but the register of information and incident clocks outgrow them. See the workbook and triggers.
Oct 18, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.