Essential Eight Assessment OCA-BD04

The Essential Eight Assessment Course has been designed by the Australian Signals Directorate’s Australian Cyber Security Centre (ACSC) and is delivered in partnership by TAFEcyber.

This course uses a blend of specialist knowledge, experience and hands-on technical training to enable cyber security and ICT professionals to understand the ACSC’s Essential Eight Assessment Guidance Package and the Essential Eight Maturity Model. These skills and knowledge will enable participants to effectively assess and improve their organisation’s cyber security posture.

Eligibility and entry requirements

To enrol in this course, you must be aged 17 years or older, an Australian citizen or permanent resident; and:

• a minimum of a Certificate IV qualification in a technical ICT discipline; and
• two (2) years' experience in a technical ICT role OR a minimum four (4) years' experience in a technical ICT role.

Applicants will be vetted to ensure they meet the entry requirements, including verification of their background and experience.

The face-to-face exam will take place at CIT Woden. Students outside the ACT should contact CIT to discuss alternative exam arrangements. 

Delivery mode

• Hybrid course delivered online over 3 days (9:00am-5:00pm) plus a face-to-face exam

What you will learn

• Explore the purpose and implementation of the ACSC’s Essential Eight mitigation strategies.
• Perform technical testing to evaluate control effectiveness.
• Apply ACSC’s Process Guide and Report Template.
• Produce a detailed assessment report with a targeted improvement plan.

Who this course is for

• Cybersecurity practitioners preparing to conduct or support Essential Eight maturity assessments.
• IT professionals with prior exposure to the Essential Eight framework seeking deeper practical application.
• Security analysts and system administrators aiming to enhance compliance, threat mitigation, and remediation planning.
• Government or corporate governance staff responsible for implementing, auditing, or improving cyber security controls.
• Those who have completed Essential Eight Essentials and are ready to learn more advanced implementation strategies.