builtin-pester/asd/frameworks/essential-eight.json
|
{ "Framework": "essential-eight", "Name": "ASD Essential Eight maturity model", "Version": "2026.09.4", "Url": "https://www.cyber.gov.au/business-government/asds-cyber-security-frameworks/essential-eight/essential-eight-maturity-model-ism-mapping", "License": "CC-BY-4.0", "Note": "Generated by build/asd/Update-AsdFramework.ps1 from the Essential Eight Maturity Level baseline profiles of ISM OSCAL release 2026.09.4 (https://www.cyber.gov.au/ism/oscal), which implement the November 2023 edition of the Essential Eight maturity model and the October 2024 edition of its ISM mapping. Each requirement is the ISM control the maturity model asks for, with the same ID. Level is the lowest maturity level whose baseline includes it (ML1, ML2 or ML3); a higher level may replace a control with a stricter one. Strategy is the mitigation strategy, or the strategies, the requirement belongs to. ISM content (c) Commonwealth of Australia, Australian Signals Directorate, licensed under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/).", "Requirements": [ {"Id": "ISM-0109", "Level": "ML3", "Strategy": ["Multi-factor authentication", "Restrict administrative privileges", "Application control", "User application hardening"], "Related": ["ism:ISM-0109"]}, {"Id": "ISM-0123", "Level": "ML2", "Strategy": ["Multi-factor authentication", "Restrict administrative privileges", "Application control", "User application hardening"], "Related": ["ism:ISM-0123"]}, {"Id": "ISM-0140", "Level": "ML2", "Strategy": ["Multi-factor authentication", "Restrict administrative privileges", "Application control", "User application hardening"], "Related": ["ism:ISM-0140"]}, {"Id": "ISM-0304", "Level": "ML3", "Strategy": "Patch applications", "Related": ["ism:ISM-0304"]}, {"Id": "ISM-0445", "Level": "ML1", "Strategy": "Restrict administrative privileges", "Related": ["ism:ISM-0445"]}, {"Id": "ISM-0843", "Level": "ML1", "Strategy": "Application control", "Related": ["ism:ISM-0843"]}, {"Id": "ISM-0974", "Level": "ML2", "Strategy": "Multi-factor authentication", "Related": ["ism:ISM-0974"]}, {"Id": "ISM-1173", "Level": "ML2", "Strategy": "Multi-factor authentication", "Related": ["ism:ISM-1173"]}, {"Id": "ISM-1175", "Level": "ML1", "Strategy": "Restrict administrative privileges", "Related": ["ism:ISM-1175"]}, {"Id": "ISM-1228", "Level": "ML2", "Strategy": ["Multi-factor authentication", "Restrict administrative privileges", "Application control", "User application hardening"], "Related": ["ism:ISM-1228"]}, {"Id": "ISM-1380", "Level": "ML1", "Strategy": "Restrict administrative privileges", "Related": ["ism:ISM-1380"]}, {"Id": "ISM-1387", "Level": "ML2", "Strategy": "Restrict administrative privileges", "Related": ["ism:ISM-1387"]}, {"Id": "ISM-1401", "Level": "ML1", "Strategy": "Multi-factor authentication", "Related": ["ism:ISM-1401"]}, {"Id": "ISM-1407", "Level": "ML3", "Strategy": "Patch operating systems", "Related": ["ism:ISM-1407"]}, {"Id": "ISM-1412", "Level": "ML2", "Strategy": "User application hardening", "Related": ["ism:ISM-1412"]}, {"Id": "ISM-1485", "Level": "ML1", "Strategy": "User application hardening", "Related": ["ism:ISM-1485"]}, {"Id": "ISM-1486", "Level": "ML1", "Strategy": "User application hardening", "Related": ["ism:ISM-1486"]}, {"Id": "ISM-1487", "Level": "ML3", "Strategy": "Restrict Microsoft Office macros", "Related": ["ism:ISM-1487"]}, {"Id": "ISM-1488", "Level": "ML1", "Strategy": "Restrict Microsoft Office macros", "Related": ["ism:ISM-1488"]}, {"Id": "ISM-1489", "Level": "ML1", "Strategy": "Restrict Microsoft Office macros", "Related": ["ism:ISM-1489"]}, {"Id": "ISM-1490", "Level": "ML2", "Strategy": "Application control", "Related": ["ism:ISM-1490"]}, {"Id": "ISM-1501", "Level": "ML1", "Strategy": "Patch operating systems", "Related": ["ism:ISM-1501"]}, {"Id": "ISM-1504", "Level": "ML1", "Strategy": "Multi-factor authentication", "Related": ["ism:ISM-1504"]}, {"Id": "ISM-1505", "Level": "ML3", "Strategy": "Multi-factor authentication", "Related": ["ism:ISM-1505"]}, {"Id": "ISM-1507", "Level": "ML1", "Strategy": "Restrict administrative privileges", "Related": ["ism:ISM-1507"]}, {"Id": "ISM-1508", "Level": "ML3", "Strategy": "Restrict administrative privileges", "Related": ["ism:ISM-1508"]}, {"Id": "ISM-1509", "Level": "ML2", "Strategy": "Restrict administrative privileges", "Related": ["ism:ISM-1509"]}, {"Id": "ISM-1511", "Level": "ML1", "Strategy": "Regular backups", "Related": ["ism:ISM-1511"]}, {"Id": "ISM-1515", "Level": "ML1", "Strategy": "Regular backups", "Related": ["ism:ISM-1515"]}, {"Id": "ISM-1542", "Level": "ML2", "Strategy": "User application hardening", "Related": ["ism:ISM-1542"]}, {"Id": "ISM-1544", "Level": "ML2", "Strategy": "Application control", "Related": ["ism:ISM-1544"]}, {"Id": "ISM-1582", "Level": "ML2", "Strategy": "Application control", "Related": ["ism:ISM-1582"]}, {"Id": "ISM-1585", "Level": "ML1", "Strategy": "User application hardening", "Related": ["ism:ISM-1585"]}, {"Id": "ISM-1621", "Level": "ML3", "Strategy": "User application hardening", "Related": ["ism:ISM-1621"]}, {"Id": "ISM-1622", "Level": "ML3", "Strategy": "User application hardening", "Related": ["ism:ISM-1622"]}, {"Id": "ISM-1623", "Level": "ML2", "Strategy": "User application hardening", "Related": ["ism:ISM-1623"]}, {"Id": "ISM-1647", "Level": "ML2", "Strategy": "Restrict administrative privileges", "Related": ["ism:ISM-1647"]}, {"Id": "ISM-1648", "Level": "ML2", "Strategy": "Restrict administrative privileges", "Related": ["ism:ISM-1648"]}, {"Id": "ISM-1649", "Level": "ML3", "Strategy": "Restrict administrative privileges", "Related": ["ism:ISM-1649"]}, {"Id": "ISM-1650", "Level": "ML2", "Strategy": "Restrict administrative privileges", "Related": ["ism:ISM-1650"]}, {"Id": "ISM-1654", "Level": "ML1", "Strategy": "User application hardening", "Related": ["ism:ISM-1654"]}, {"Id": "ISM-1655", "Level": "ML3", "Strategy": "User application hardening", "Related": ["ism:ISM-1655"]}, {"Id": "ISM-1656", "Level": "ML3", "Strategy": "Application control", "Related": ["ism:ISM-1656"]}, {"Id": "ISM-1657", "Level": "ML1", "Strategy": "Application control", "Related": ["ism:ISM-1657"]}, {"Id": "ISM-1658", "Level": "ML3", "Strategy": "Application control", "Related": ["ism:ISM-1658"]}, {"Id": "ISM-1659", "Level": "ML3", "Strategy": "Application control", "Related": ["ism:ISM-1659"]}, {"Id": "ISM-1660", "Level": "ML2", "Strategy": "Application control", "Related": ["ism:ISM-1660"]}, {"Id": "ISM-1667", "Level": "ML2", "Strategy": "User application hardening", "Related": ["ism:ISM-1667"]}, {"Id": "ISM-1668", "Level": "ML2", "Strategy": "User application hardening", "Related": ["ism:ISM-1668"]}, {"Id": "ISM-1669", "Level": "ML2", "Strategy": "User application hardening", "Related": ["ism:ISM-1669"]}, {"Id": "ISM-1670", "Level": "ML2", "Strategy": "User application hardening", "Related": ["ism:ISM-1670"]}, {"Id": "ISM-1671", "Level": "ML1", "Strategy": "Restrict Microsoft Office macros", "Related": ["ism:ISM-1671"]}, {"Id": "ISM-1672", "Level": "ML1", "Strategy": "Restrict Microsoft Office macros", "Related": ["ism:ISM-1672"]}, {"Id": "ISM-1673", "Level": "ML2", "Strategy": "Restrict Microsoft Office macros", "Related": ["ism:ISM-1673"]}, {"Id": "ISM-1674", "Level": "ML3", "Strategy": "Restrict Microsoft Office macros", "Related": ["ism:ISM-1674"]}, {"Id": "ISM-1675", "Level": "ML3", "Strategy": "Restrict Microsoft Office macros", "Related": ["ism:ISM-1675"]}, {"Id": "ISM-1676", "Level": "ML3", "Strategy": "Restrict Microsoft Office macros", "Related": ["ism:ISM-1676"]}, {"Id": "ISM-1679", "Level": "ML1", "Strategy": "Multi-factor authentication", "Related": ["ism:ISM-1679"]}, {"Id": "ISM-1680", "Level": "ML1", "Strategy": "Multi-factor authentication", "Related": ["ism:ISM-1680"]}, {"Id": "ISM-1681", "Level": "ML1", "Strategy": "Multi-factor authentication", "Related": ["ism:ISM-1681"]}, {"Id": "ISM-1682", "Level": "ML2", "Strategy": "Multi-factor authentication", "Related": ["ism:ISM-1682"]}, {"Id": "ISM-1683", "Level": "ML2", "Strategy": "Multi-factor authentication", "Related": ["ism:ISM-1683"]}, {"Id": "ISM-1685", "Level": "ML2", "Strategy": "Restrict administrative privileges", "Related": ["ism:ISM-1685"]}, {"Id": "ISM-1686", "Level": "ML3", "Strategy": "Restrict administrative privileges", "Related": ["ism:ISM-1686"]}, {"Id": "ISM-1687", "Level": "ML2", "Strategy": "Restrict administrative privileges", "Related": ["ism:ISM-1687"]}, {"Id": "ISM-1688", "Level": "ML1", "Strategy": "Restrict administrative privileges", "Related": ["ism:ISM-1688"]}, {"Id": "ISM-1689", "Level": "ML1", "Strategy": "Restrict administrative privileges", "Related": ["ism:ISM-1689"]}, {"Id": "ISM-1690", "Level": "ML1", "Strategy": "Patch applications", "Related": ["ism:ISM-1690"]}, {"Id": "ISM-1691", "Level": "ML1", "Strategy": "Patch applications", "Related": ["ism:ISM-1691"]}, {"Id": "ISM-1692", "Level": "ML3", "Strategy": "Patch applications", "Related": ["ism:ISM-1692"]}, {"Id": "ISM-1693", "Level": "ML2", "Strategy": "Patch applications", "Related": ["ism:ISM-1693"]}, {"Id": "ISM-1694", "Level": "ML1", "Strategy": "Patch operating systems", "Related": ["ism:ISM-1694"]}, {"Id": "ISM-1695", "Level": "ML1", "Strategy": "Patch operating systems", "Related": ["ism:ISM-1695"]}, {"Id": "ISM-1696", "Level": "ML3", "Strategy": "Patch operating systems", "Related": ["ism:ISM-1696"]}, {"Id": "ISM-1697", "Level": "ML3", "Strategy": "Patch operating systems", "Related": ["ism:ISM-1697"]}, {"Id": "ISM-1698", "Level": "ML1", "Strategy": "Patch applications", "Related": ["ism:ISM-1698"]}, {"Id": "ISM-1699", "Level": "ML1", "Strategy": "Patch applications", "Related": ["ism:ISM-1699"]}, {"Id": "ISM-1700", "Level": "ML2", "Strategy": "Patch applications", "Related": ["ism:ISM-1700"]}, {"Id": "ISM-1701", "Level": "ML1", "Strategy": "Patch operating systems", "Related": ["ism:ISM-1701"]}, {"Id": "ISM-1702", "Level": "ML1", "Strategy": "Patch operating systems", "Related": ["ism:ISM-1702"]}, {"Id": "ISM-1703", "Level": "ML3", "Strategy": "Patch operating systems", "Related": ["ism:ISM-1703"]}, {"Id": "ISM-1704", "Level": "ML1", "Strategy": "Patch applications", "Related": ["ism:ISM-1704"]}, {"Id": "ISM-1705", "Level": "ML2", "Strategy": "Regular backups", "Related": ["ism:ISM-1705"]}, {"Id": "ISM-1706", "Level": "ML3", "Strategy": "Regular backups", "Related": ["ism:ISM-1706"]}, {"Id": "ISM-1707", "Level": "ML2", "Strategy": "Regular backups", "Related": ["ism:ISM-1707"]}, {"Id": "ISM-1708", "Level": "ML3", "Strategy": "Regular backups", "Related": ["ism:ISM-1708"]}, {"Id": "ISM-1807", "Level": "ML1", "Strategy": ["Patch applications", "Patch operating systems"], "Related": ["ism:ISM-1807"]}, {"Id": "ISM-1808", "Level": "ML1", "Strategy": ["Patch applications", "Patch operating systems"], "Related": ["ism:ISM-1808"]}, {"Id": "ISM-1810", "Level": "ML1", "Strategy": "Regular backups", "Related": ["ism:ISM-1810"]}, {"Id": "ISM-1811", "Level": "ML1", "Strategy": "Regular backups", "Related": ["ism:ISM-1811"]}, {"Id": "ISM-1812", "Level": "ML1", "Strategy": "Regular backups", "Related": ["ism:ISM-1812"]}, {"Id": "ISM-1813", "Level": "ML3", "Strategy": "Regular backups", "Related": ["ism:ISM-1813"]}, {"Id": "ISM-1814", "Level": "ML1", "Strategy": "Regular backups", "Related": ["ism:ISM-1814"]}, {"Id": "ISM-1815", "Level": "ML2", "Strategy": ["Multi-factor authentication", "Restrict administrative privileges", "Application control", "User application hardening"], "Related": ["ism:ISM-1815"]}, {"Id": "ISM-1819", "Level": "ML2", "Strategy": ["Multi-factor authentication", "Restrict administrative privileges", "Application control", "User application hardening"], "Related": ["ism:ISM-1819"]}, {"Id": "ISM-1823", "Level": "ML2", "Strategy": "User application hardening", "Related": ["ism:ISM-1823"]}, {"Id": "ISM-1824", "Level": "ML2", "Strategy": "User application hardening", "Related": ["ism:ISM-1824"]}, {"Id": "ISM-1859", "Level": "ML2", "Strategy": "User application hardening", "Related": ["ism:ISM-1859"]}, {"Id": "ISM-1860", "Level": "ML2", "Strategy": "User application hardening", "Related": ["ism:ISM-1860"]}, {"Id": "ISM-1861", "Level": "ML3", "Strategy": "Restrict administrative privileges", "Related": ["ism:ISM-1861"]}, {"Id": "ISM-1870", "Level": "ML1", "Strategy": "Application control", "Related": ["ism:ISM-1870"]}, {"Id": "ISM-1871", "Level": "ML2", "Strategy": "Application control", "Related": ["ism:ISM-1871"]}, {"Id": "ISM-1872", "Level": "ML2", "Strategy": "Multi-factor authentication", "Related": ["ism:ISM-1872"]}, {"Id": "ISM-1873", "Level": "ML2", "Strategy": "Multi-factor authentication", "Related": ["ism:ISM-1873"]}, {"Id": "ISM-1874", "Level": "ML3", "Strategy": "Multi-factor authentication", "Related": ["ism:ISM-1874"]}, {"Id": "ISM-1876", "Level": "ML1", "Strategy": "Patch applications", "Related": ["ism:ISM-1876"]}, {"Id": "ISM-1877", "Level": "ML1", "Strategy": "Patch operating systems", "Related": ["ism:ISM-1877"]}, {"Id": "ISM-1879", "Level": "ML3", "Strategy": "Patch operating systems", "Related": ["ism:ISM-1879"]}, {"Id": "ISM-1883", "Level": "ML1", "Strategy": "Restrict administrative privileges", "Related": ["ism:ISM-1883"]}, {"Id": "ISM-1889", "Level": "ML2", "Strategy": "User application hardening", "Related": ["ism:ISM-1889"]}, {"Id": "ISM-1890", "Level": "ML3", "Strategy": "Restrict Microsoft Office macros", "Related": ["ism:ISM-1890"]}, {"Id": "ISM-1891", "Level": "ML3", "Strategy": "Restrict Microsoft Office macros", "Related": ["ism:ISM-1891"]}, {"Id": "ISM-1892", "Level": "ML1", "Strategy": "Multi-factor authentication", "Related": ["ism:ISM-1892"]}, {"Id": "ISM-1893", "Level": "ML1", "Strategy": "Multi-factor authentication", "Related": ["ism:ISM-1893"]}, {"Id": "ISM-1894", "Level": "ML3", "Strategy": "Multi-factor authentication", "Related": ["ism:ISM-1894"]}, {"Id": "ISM-1896", "Level": "ML3", "Strategy": "Restrict administrative privileges", "Related": ["ism:ISM-1896"]}, {"Id": "ISM-1897", "Level": "ML3", "Strategy": "Restrict administrative privileges", "Related": ["ism:ISM-1897"]}, {"Id": "ISM-1898", "Level": "ML3", "Strategy": "Restrict administrative privileges", "Related": ["ism:ISM-1898"]}, {"Id": "ISM-1900", "Level": "ML3", "Strategy": "Patch operating systems", "Related": ["ism:ISM-1900"]}, {"Id": "ISM-1901", "Level": "ML3", "Strategy": "Patch applications", "Related": ["ism:ISM-1901"]}, {"Id": "ISM-1902", "Level": "ML3", "Strategy": "Patch operating systems", "Related": ["ism:ISM-1902"]}, {"Id": "ISM-1903", "Level": "ML3", "Strategy": "Patch operating systems", "Related": ["ism:ISM-1903"]}, {"Id": "ISM-1904", "Level": "ML3", "Strategy": "Patch operating systems", "Related": ["ism:ISM-1904"]}, {"Id": "ISM-1905", "Level": "ML1", "Strategy": "Patch applications", "Related": ["ism:ISM-1905"]}, {"Id": "ISM-1906", "Level": "ML2", "Strategy": ["Multi-factor authentication", "Restrict administrative privileges", "Application control", "User application hardening"], "Related": ["ism:ISM-1906"]}, {"Id": "ISM-1907", "Level": "ML3", "Strategy": ["Multi-factor authentication", "Restrict administrative privileges", "Application control", "User application hardening"], "Related": ["ism:ISM-1907"]} ] } |