Essential Eight ML3 Readiness Checklist

A structured, ungated self-assessment checklist for Essential Eight ML3 readiness — coverage, timeframes, evidence and exception questions per strategy.

About this resource

A working checklist for teams preparing an Essential Eight Maturity Level 3 uplift or readiness review. It structures the self-assessment around the three questions that decide ML3 in practice — coverage across the whole fleet, speed against exploit-driven timeframes, and resistance to capable adversaries — with per-strategy prompts and an evidence column for each item.

Intended audience: security practitioners running the assessment; CISOs and uplift program leads consuming the result.

How to use it: work strategy by strategy; record evidence (reports, metrics, test results), not assertions; treat every open exception as in scope. The companion article, Essential Eight ML3 Readiness: A Self-Assessment Checklist, explains the method and the traps.

Download status

The downloadable PDF is in final production and will be attached here at platform launch. This landing page is live so the resource has a stable, linkable home; no email address is required now or when the file lands — this resource is and will remain ungated.