ACSC Essential Eight

Cyber Security for Gold Coast Businesses

We handle your cybersecurity so you can focus on running your business. From 24/7 threat monitoring to staff training and Essential Eight alignment, we keep you protected and audit-ready.

ACSC Framework

We Implement the Essential Eight For You

The Essential Eight is the Australian Government's recommended security framework. We handle the implementation and ongoing management so you can tick the compliance box and focus on your business.

1

Application Control

Prevent execution of unapproved applications including executables, DLLs, scripts, and installers. We implement Microsoft AppLocker and third-party whitelisting solutions.

2

Patch Applications

Security vulnerabilities in applications are regularly exploited. We ensure patches are applied within 48 hours for high-risk vulnerabilities with automated patch management.

3

Configure Microsoft Office Macros

Block macros from the internet and allow only vetted macros in trusted locations or those digitally signed with trusted certificates.

4

User Application Hardening

Harden web browsers and PDF viewers by blocking Flash, ads, and Java. Disable unnecessary plugins and extensions to reduce attack surface.

5

Restrict Administrative Privileges

Implement role-based access control and just-in-time administrative access. Regular review and validation of all privileged accounts.

6

Patch Operating Systems

Patch operating systems within 48 hours for critical vulnerabilities. Automated deployment for non-critical updates with regular vulnerability scanning.

7

Multi-Factor Authentication

Implement MFA for all remote access, privileged accounts, and sensitive applications using hardware tokens or authenticator apps.

8

Regular Backups

Daily backups with regular restoration testing. Offline and immutable storage with 3-2-1 backup strategy for ransomware resilience.

We Get You to the Right Level

We assess where you are now, recommend the right target level for your business, and get you there without disruption.

Level 1

Foundational

Partially aligned with ACSC guidance. Provides protection against commodity malware and opportunistic attacks.

Level 2

Managed

Mostly aligned with ACSC guidance. Provides good protection against targeted attacks by less sophisticated adversaries.

Level 3

Optimised

Fully aligned with ACSC guidance. Provides excellent protection against sophisticated attacks and advanced persistent threats.

Not sure which maturity level you need? We'll assess your current state and recommend the right target.

Request an Assessment

How We Get You Secure

We follow a proven process that gets you protected and compliant without disrupting your day-to-day operations.

Phase 1

Assessment & Planning

Week 1
  • Security assessment
  • Gap analysis
  • Implementation roadmap
Phase 2

Core Implementation

Weeks 2-4
  • Deploy security controls
  • Patch management
  • System hardening
Phase 3

Advanced Controls

Weeks 5-8
  • Application control
  • Admin restrictions
  • Monitoring setup
Phase 4

Ongoing Protection

Ongoing
  • Audit-ready maintenance
  • Continuous improvement
  • Staff training

Everything We Do to Keep You Safe

From monitoring threats to training your team, here's how we protect your business every day.

We Monitor Threats 24/7

We watch your systems around the clock so you don't have to. When threats appear, we respond immediately to keep your business safe.

We Protect Every Device

We secure all your computers, laptops, and mobile devices with enterprise-grade protection that stops malware and ransomware.

We Spot Problems Early

We continuously monitor your network for suspicious activity and fix issues before they become breaches.

We Find Your Weaknesses

We regularly test your systems to find vulnerabilities and fix them before hackers can exploit them.

We Keep You Compliant

We ensure you meet industry regulations and government requirements, keeping your business audit-ready at all times.

We Train Your Team

We teach your staff to recognise phishing emails and social engineering attacks, turning them into your first line of defence.

ISO/IEC 27001:2022 Information Security Management certified, certificate number 8562-4315-01

We Help You Achieve ISO 27001 Certification

Looking to become ISO 27001 certified? We've been through the process ourselves and know exactly what's required. Our certification alignment program guides you through implementing the technical controls needed for certification.

Computer Services Group is certified to ISO/IEC 27001:2022 under certificate number 8562-4315-01, issued by Compass Assurance Services (accredited by JAS-ANZ, accreditation number M5310713AO) and valid from 21 May 2026 to 20 May 2029.

  • We assess your current security posture against ISO 27001 requirements
  • We implement the technical controls required for certification
  • We prepare your systems and documentation for the audit
  • We provide ongoing support to maintain your certification
Talk to Us About ISO 27001

Our ISO 27001 Alignment Program

1

Gap Assessment

We identify what you need to achieve certification

2

Technical Controls

We implement the required security controls

3

Audit Preparation

We prepare you for the certification audit

4

Ongoing Maintenance

We keep you compliant year after year

CSG has played a critical role in enabling our digital maturity and strengthening our cyber security posture. Their expertise, guidance, and ongoing support contributed significantly to GCPHN achieving Essential Eight Maturity Level 1 and ISO 27001 certification.
Dr Alyson RossExecutive Director of Digital Insights and PerformanceGold Coast Primary Health Network

Why Gold Coast Businesses Trust Us

We're ISO 27001 certified and Essential Eight experts. We bring the same security practices used by large enterprises to local Gold Coast businesses like yours.

  • We're ISO 27001 certified - we practise what we preach
  • We handle your Essential Eight alignment end-to-end
  • We keep your systems audit-ready at all times
  • We're local Gold Coast - we can be onsite when needed
  • We monitor your systems 24/7, even when you're sleeping
  • We understand healthcare, legal, and finance compliance
  • We help you meet government contractor requirements
  • We hunt for threats before they become problems
  • We give you clear reports so you know you're protected
ISO 27001 Information Security Certified

Let Us Take Cybersecurity Off Your Plate

Book a free 30-minute security review. We'll show you exactly where you're vulnerable and how we can fix it.

Frequently asked questions

What is the ACSC Essential Eight and does my business need it?
The Essential Eight is a set of eight security strategies from the Australian Cyber Security Centre that block the most common cyber attacks. Most Australian businesses benefit from aligning to it, and it is increasingly expected by insurers, government contracts, and larger clients. We assess where you sit today and build a practical roadmap to the maturity level you need.
Which Gold Coast businesses are ISO 27001 certified for security?
Computer Services Group holds ISO/IEC 27001:2022 certification under certificate 8562-4315-01, independently audited each year by Compass Assurance Services. We use that same framework to help clients strengthen their own security and work towards certification.
How much does a cybersecurity assessment cost?
A security assessment is scoped to the size of your environment, so the cost depends on how many users, sites, and systems you run. We start with a conversation and a fixed quote, so there are no open-ended bills. Book a free initial review to get a clear picture of your current risks.
Do you provide 24/7 security monitoring?
Yes. Our threat detection and monitoring operate 24/7, so suspicious activity is flagged and acted on around the clock. Support and remediation for non-critical items are handled during business hours, Monday to Friday 8:30am to 5:00pm AEST, with critical incidents escalated immediately.
Can you help us recover from a cyber incident or ransomware?
Yes. We help contain the incident, restore from tested backups, and close the gap that allowed it, then document what happened for insurers and regulators. Businesses with tested backups and Essential Eight controls in place recover far faster, which is why we put those in place first.