TERESEC · Security coverage check

teresec.com.au

Free security coverage check: Australian ISM and Essential Eight coverage from the licences you already pay for

The check shows which controls in the Australian Information Security Manual (ISM) and the Essential Eight your existing security products already cover. You pick the products and licence tiers you pay for, answer a few questions about how you use them, and see your coverage in about three minutes. It is free, and no sign-up is needed to start.

JavaScript is needed to run the check itself.

How does the coverage check work?

  1. Which of these do you pay for? Pick the security products you already own and the licence tier you are on. Tier matters, because tier is what decides whether a capability is actually included in what you pay for.
  2. A few questions about how you use them. Each is answered Yes, No or Not sure, and the questions are chosen for the products you selected. Owning a licence is not the same as having the capability switched on.
  3. What your licences already cover. Your selection is read against the ISM, published by the Australian Signals Directorate (ASD), with your Essential Eight coverage alongside it using ASD's own maturity markings, by framework and by ISM chapter.

What do I get?

Coverage by framework and by ISM chapter on screen, and a full report emailed to you, free: coverage in ASD's own words chapter by chapter, and findings sorted into what is entitled but switched off, what is worth confirming, what is running but unattended, what more than one of your products provides, and what your selection does not reach. The report never names a product to buy. See a sample report.

Is it an audit or a certification?

No. It reflects what your licence tiers appear to entitle you to, not whether those capabilities are deployed, configured or effective in your environment. Every claim in our catalogue cites the vendor's own public documentation with the date we checked it, and a gap means we have not mapped a capability that satisfies that control for the products you selected. It is not a statement about what a product can do.

Who runs it?

TERESEC, a Brisbane-based cyber security consultancy for Australian small and medium business. To turn the result into a prioritised plan, the fixed-price IT Security Review is $399 inc GST. Read more about the check.