Saved on compliance
Less compliance costs
To get certified
ASD Essentials is the Australian Signals Directorate's cyber security framework, published on 15 October 2026 as the evolution of the Essential Eight. ASD designed it for Commonwealth entities, critical infrastructure owners and operators, and large organisations, though any organisation can use it.
Instead of eight mitigation strategies scored against maturity levels, ASD Essentials sets out principles and actions across eight domains. Six domains cover your technology, from Boundary Services and Identity Services through to Business Systems and User Devices. The other two, Governance and Culture and Visibility and Response, apply across everything you do.
The framework comes in chapters, each written for a different technology environment, with supporting guides for transitioning, planning and assessing. ASD also recommends a sequence of priority phases, so you know where to start.
Done well, ASD Essentials gives your executives, your board and your customers a clear, evidence-based view of how well your cyber security is working.
de.iterate makes ASD Essentials simpler, clearer and easier to sustain.
In place of Word documents, spreadsheets, shared folders and manual reminders, you get one integrated platform for your whole management system. Policies, training, risk registers, asset registers, supplier records, evidence, assurance tasks, audits and reporting all sit in one place, connected to each other and kept current.
Your evidence links to the right controls, risks and assets, so you can see what's behind every rating. Your policies reflect how your business actually works. And when the next assessment comes around, you're updating a living system, with nothing to rebuild.
ASD Essentials for enterprise IT: the direct evolution of the Essential Eight, and the chapter most organisations will start with.
ASD Essentials for cloud: for organisations that run entirely on software as a service (SaaS) and platform as a service (PaaS).
ASD Essentials for OT: for critical infrastructure operators protecting operational technology environments.
Many organisations run a mix of environments. Our Aussie GRC experts can help you work out where to start.
de.iterate delivers modern, scalable governance in a simple, plain-language platform that fits your business — not the other way around.
More than a checklist. More than automation. de.iterate delivers real governance programs that connect risk, compliance, privacy, safety, quality, and environmental management, all in one place. We make governance and compliance easy in a plain-language, scalable platform that keeps your business in control, audit-ready, and confident every day.
Plenty of platforms promise automation. de.iterate goes further by making that automation useful.
Every piece of evidence connects to the right control, risk, asset and process, so you know what each rating rests on. AI can map your existing documents to controls and suggest assurance tasks, and every suggestion arrives as a draft for a person to approve. That keeps your ratings honest, which is exactly what ASD Essentials asks for.
That is the difference between a tool that creates activity and a platform that creates assurance.
