{
  "node_id": "australia-acsc-essential-eight-maturity-2023",
  "title": "Australian Cyber Security Centre Essential Eight Maturity Model 2023 - Patch Applications, MFA, Application Control and Daily Backups: Four Maturity Level Definitions",
  "domain": "Cybersecurity",
  "version": "1.0.0",
  "last_updated": "2026-04-20",
  "bluf": "This regulation outlines four maturity levels for implementing the Essential Eight mitigation strategies, with Maturity Level 2 requiring organisations to apply patches within 48 hours for internet-facing services and enforce multi-factor authentication (MFA) for administrative access and remote network access. It applies to all Australian government agencies and critical infrastructure entities as defined under the Security of Critical Infrastructure Act 2018 (as amended 2022), per ACSC guidance in Section 'Maturity Model'.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "nist_framework",
      "iso_standard",
      "industry_mapping",
      "ai_overlay_2026"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "australia-essential-eight-2023",
    "cyber-nist-800-53-ac2",
    "nist-800-53-sc7",
    "c-scrm-practices-systems-organizations",
    "cyber-nist-csf-2"
  ],
  "primary_citations_count": 5
}