Transitioning from the Essential Eight to ASD Essentials

What iTnews and techpartner.news report about moving from the Essential Eight to ASD Essentials: existing work remains relevant, every strategy maps to at least one principle, but maturity ratings do not automatically convert.

Purpose. ASD launched ASD Essentials on 15 October 2026 to replace the Essential Eight, techpartner.news reported, and a transition guide is being released alongside the framework, with workshops planned for organisations working through the change (iTnews).

Existing work carries forward

For organisations already invested in the Essential Eight, ASD said existing work remains relevant. Every Essential Eight mitigation strategy maps to at least one principle in the new series, and most controls will directly satisfy or substantially contribute to a corresponding action. ASD does not recommend slowing or stopping existing uplift programmes (all techpartner.news). ACSC head Stephanie Crowe told iTnews there was 'no wasted investment' for organisations that remain aligned with the Essential Eight.

Maturity levels do not convert

Existing Essential Eight maturity ratings do not automatically convert into Essentials effectiveness ratings, as the two models measure different things: implementation of specific controls versus outcome-based effectiveness across domains (techpartner.news). iTnews reports ASD's own guidance says organisations should check existing controls against the Essentials 'rather than assume they are equivalent'. Under the Essentials, priority phases replace maturity levels (techpartner.news), and ASD said phases are not maturity ratings (iTnews).

Where to start

ASD recommends organisations begin scoping work in the phase one domains: boundary services, identity services, governance and culture, and visibility and response (techpartner.news).

Timing and obligations

When the Essentials becomes mandatory is yet to be settled; Crowe told iTnews ASD is working with policy agencies on a regulatory transition timeframe over the next year or two. In the meantime the Essential Eight will stay on ASD's website alongside the new framework, and government agencies will be assessed against both next year (iTnews). During the transition ASD will continue to maintain both frameworks, along with supporting resources and implementation guidance (techpartner.news).

Mapping detail

Neither outlet published ASD's strategy-by-strategy mapping tables or its step-by-step transition pathway. Read the ASD publication listed under further reading for those; this page does not summarise them.