ACSC Essential Eight and Microsoft 365

What Essential Eight is

The Essential Eight is the Australian Cyber Security Centre's set of prioritized mitigation strategies. Two of the eight, multi-factor authentication and restricting administrative privileges, map directly onto Senserva's core Microsoft 365 and Entra ID findings, and application control and patching map to device and patch findings.

How Siemserva maps to Essential Eight

Essential Eight asks for strong identity, access control, and monitoring. Siemserva evidences those areas with the checks below, each ranked by Severity and checked against your own tenant:

• Multi-factor authentication (42 checks)

  Auth User Not MFA RegisteredAuth Microsoft Authenticator Authentication Method In Use But Not Allowed By UserAuth Password Authentication Method In Use But Not Allowed By Senserva Security ManagerAuth Passwordless Microsoft Authenticator Authentication Method In Use But Not Allowed By UserAuth Require Passwordless But Its Not Used By UserAuth Software Oath Authentication Method In Use But Not Allowed By User

• Privileged access (PIM) (34 checks)

  PIM Alerts No MFA On Activation AlertPIM Policy Expiration RequiredPIM Policy Missing For UserRole Ai Administrator AssignedRole Standing High Privilege AssignmentPIM Alerts License Suspended

• Conditional Access (60 checks)

  Conditional Access Admin Portal Missing MFAConditional Access Break Glass Account Covered By PolicyConditional Access Group Critical Coverage GapConditional Access MFA Policy BypassedConditional Access User Critical Coverage GapConditional Access Block Legacy Exchange Active Sync Not Found

• Device compliance (220 checks)

  Intune Device Missing KEV PatchIntune Device Vulnerability KEVIntune Policy Autopatch CVE Gap KEVDevice Endpoint Detection And ResponseDevice Has Outdated Android Operating SystemDevice Has Outdated IOS Operating System

See every check with its Severity and remediation in the checks catalog, or the per-control detail in the control reference.

Evidence Essential Eight in your own Microsoft 365

Siemserva by Senserva runs the identity, access, privileged-access, and logging checks above, and 650+ others, against your own tenant: it shows where you meet or miss each requirement, ranks the gaps by Severity, and produces audit-ready evidence and validated fixes to close them.