For Gold Coast & Brisbane businesses · Limited sessions each month
How exposed is your business? Find out in one free Essential 8 Gap Analysis.
In 45 minutes, our ISO 27001 certified team measures your business against the Australian Government's Essential 8, then hands you a plain English scorecard showing exactly where you're protected, where you're exposed, and what to fix first.
ISO 27001 Certified · Supporting QLD businesses since 1999 · ACSC Essential 8 aligned
Your Essential 8 Scorecard
Example scorecard. Yours is built from your actual systems in a free 45 minute session, with your top three gaps and a prioritised roadmap.
The problem
“We have IT support” is not the same as “we're secure”
Most businesses we assess are confident they're covered, right up until we show them their scorecard. The common story:
No evidence
Your IT is looked after, but nobody can show you evidence of where you stand against a recognised security standard.
Insurance is asking
Your cyber insurance renewal is asking harder questions every year (MFA, patching, backups, admin access), and guessing wrong can void a claim.
Clients are asking
Your bigger clients, accreditors or government buyers are starting to ask what your Essential 8 maturity level is. “We're not sure” doesn't win tenders.
The uncomfortable truth: you can't manage a risk you've never measured. That's the whole purpose of the Gap Analysis.
Why now
Why 2026 is the year to get measured
The Essential 8 is being retired
The Australian Signals Directorate is transitioning the Essential Eight into a new “Essentials” framework over the next two years. Businesses who know their maturity level now will carry that work straight into the new standard. Businesses who don't will be starting from zero under newer, broader rules.
Reporting is now law
Ransomware payment reporting is mandatory for many businesses under the Cyber Security Act, and privacy penalties have never been higher. Directors are expected to know their cyber posture.
Insurers check before they pay
Claims are increasingly assessed against exactly the controls the Essential 8 covers. If your application says “yes, we patch promptly” and you don't, you may find out at the worst possible moment.
The offer
What your free Gap Analysis includes
Your Essential 8 Scorecard
A one page rating of your business against all eight controls, using the official ASD maturity levels (0–3). No jargon: red, amber, green.
Your top three gaps, explained
What they are, what could actually go wrong, and how urgent each one is, in language you can take to your board, partners or insurer.
A prioritised remediation roadmap
The order to fix things for maximum risk reduction per dollar, with indicative costs. Yours to keep whether or not you work with us.
45 minutes with a certified team
Run by CSG's ISO 27001 certified security team, the same team trusted by Queensland healthcare, legal, accounting and construction firms.
How it works
Three steps. Zero disruption.
Book a time
Pick a 45 minute slot that suits you, remote or at your premises. Bring whoever looks after your IT.
We measure
We walk through the eight controls with you. No interruption to your systems, no software to install for the initial analysis.
You get the roadmap
Within 48 hours you receive your scorecard and prioritised action plan. What you do with it is entirely up to you.
Who it's for
Built for businesses that can't afford to guess
We work with the industries where a breach costs more than money: medical and allied health practices, aged care providers, law and accounting firms, construction, engineering and architecture firms, and professional services across South East Queensland. If you hold client data, patient records, or payment details, this is for you.
Why CSG
Trusted since 1999
- ISO 27001 certified: we hold ourselves to the same standard we assess you against, with a certified Lead Implementer on staff.
- Essential 8 aligned service delivery, mapped to ACSC guidance.
- Local, plain-speaking team in Nerang. Straight answers, not tech speak.
Not ready to book?
Score yourself in 5 minutes.
Download the free Essential 8 Self-Assessment: 24 plain English questions that show you where your business stands, instantly. No technical background needed.
Get the free self-assessment
FAQ
Fair questions, straight answers
Is it really free?+
Yes. The Gap Analysis and roadmap are free, no strings. We offer it because some businesses ask us to fix what we find. That's our business model, and we're upfront about it. There is zero obligation, and the roadmap is yours either way.
Will you need access to our systems?+
No. The initial analysis is a guided conversation. We don't need to touch your systems. If deeper technical verification is useful, we'll recommend it in the roadmap and you can decide.
We already have an IT provider. Is this still relevant?+
Yes, and it isn't a criticism of them. Everyday IT support and security assurance are different disciplines. Many clients share the scorecard with their existing provider as a checklist.
What is the Essential 8?+
Eight baseline security controls defined by the Australian Signals Directorate, covering patching, multi-factor authentication, backups, admin access, application control and more. It's the benchmark referenced by insurers, government contracts and regulators across Australia.
Isn't the Essential 8 being replaced?+
It's evolving. The ASD is transitioning it into a broader "Essentials" framework over the next couple of years, and has confirmed existing Essential 8 work carries forward. Knowing your maturity now puts you ahead of the change, not behind it.
How long until we get results?+
The session takes 45 minutes. Your scorecard and roadmap arrive within 48 hours.
Find out where you stand before someone else does.
Free 45 minute Essential 8 Gap Analysis. Limited sessions available each month.