Assessment Help

The wizard takes you through one domain at a time.

Step Indicator

A progress bar at the top shows where you are (for example, “Step 3 of 8: Configure Microsoft Office macro settings”).

Control Cards

Each control appears as a card with:

• A plain-language description tailored to your industry
• “See technical description” to expand the official ACSC wording
• Compliance options — Yes / Partly / No / N/A
• A notes field you can expand to add context

Navigation

“Save & Continue →” moves you forward, “← Previous” takes you back. Your progress saves automatically.

Submitting

On the final step, click “Submit assessment for analysis.” Once submitted, your responses can’t be edited.

For each control, choose one of four statuses.

✅ Yes, We Do This (Compliant)

Fully in place across all the relevant systems and users.

⚠️ We Partly Do This (Partially Compliant)

In place for some systems or users, but not across the board.

❌ No (Non-Compliant)

Not in place at all, or you’re not sure.

N/A (Not Applicable)

The control genuinely doesn’t apply to your business (this is rare).

The Essential Eight is made up of 8 domains.

1. Application control — restricting which software can run on your computers.
2. Patch applications — keeping software (browsers, email, PDF readers) up to date.
3. Configure Microsoft Office macro settings — controlling whether macros can run, since they’re a common way malware gets in.
4. User application hardening — turning off risky features in everyday apps, such as blocking web ads and stopping browsers from running Java from the internet.
5. Restrict administrative privileges — limiting who has admin access.
6. Patch operating systems — keeping Windows and macOS up to date.
7. Multi-factor authentication (MFA) — requiring a second check when logging in.
8. Regular backups — keeping regular, tested backups. Your last line of defence against ransomware.

CyberSmart360 translates technical security language into terms that make sense for your industry.

How It Works

Each control description is tailored to your industry, so “regular backups” reads differently for an accountant than it does for a plumber.

Technical Description Always Available

Click “See technical description” on any control card to read the official ACSC wording.

Changing Your Industry

Go to Settings → Organisation Details. Your next assessment will use the new translations, while previous assessments keep their original wording.

The platform saves your progress automatically as you go.

Auto-save

Your responses save every time you move between fields, and at least every 30 seconds. The status indicator shows ✅ “All changes saved,” 🔄 “Saving…,” or ⚠️ “Unsaved changes.”

Resuming

Go to your Dashboard, find your assessment (marked “In Progress”), and click “Continue.”

Submitting

1. Complete all 8 steps
2. Click “Submit Assessment for Analysis”
3. Confirm in the dialog