User application hardening

search account_circle

boltEssential 8

User application hardening

27 controls in this part of theASD Essential Eight. Each control links to plain-English guidance, audit tips and cross-framework mappings.

Disable or remove Internet Explorer 11

Ensure Internet Explorer 11 is not used to increase security.

Web browsers must not execute Java content from the internet

Ensure web browsers block Java content from the internet to reduce security risks.

Web browsers block web ads from the internet

Ensure web browsers do not display internet ads to prevent potential security risks.

Web browser security settings locked down to users

Users should not be able to change web browser security settings.

Web browsers are hardened with the most restrictive guidance

Harden web browsers using the strictest security settings from ASD or vendor guides.

Block Microsoft Office from creating child processes

Prevent Microsoft Office from starting other programs or activities on its own.

Block Microsoft Office from creating executable content

Prevent Microsoft Office from making executable files to stop malware.

Block Microsoft Office from injecting code into other processes

Stop Microsoft Office from putting code into other programs to prevent security risks.

Configure Microsoft Office to prevent activation of OLE packages

Ensure Microsoft Office is set up to stop risky linking and embedding features.

Office productivity suites are hardened using ASD and vendor guidance

Ensure office suites follow the strictest security guidelines to reduce risks.

Office productivity suite settings are immutable by users

Ensure users cannot change security settings in office applications.

Block PDF software from creating child processes

Prevent PDF programs from running other programs to improve security.

Ensure PDF software is securely configured using guidance.

Secure PDF applications based on guidance to protect against hacks.

PDF software security settings cannot be changed by users

Prevent users from changing PDF software security settings to enhance safety.

Centrally log PowerShell module, script block, and transcription events

Ensure logging of PowerShell activities is centralised for monitoring.

Command line process creation logging is centralised

Log all command line processes in a central location for monitoring.

Protect event logs from unauthorised changes or deletion

Ensure event logs cannot be tampered with or erased without permission.

Timely Analysis of Event Logs from Internet-Facing Servers

Regularly review event logs from internet-facing servers to spot security issues quickly.

Timely Analysis of Cyber Security Events to Identify Incidents

Quickly review cyber events to find and manage security threats.

Cybersecurity incidents must be reported immediately to the CISO

Report any cybersecurity incidents to the Chief Information Security Officer as soon as they happen.

Report cyber security incidents to ASD promptly

Report cyber security incidents to ASD as soon as they're found.

Cyber incident response plan is enacted after identification

Activate the response plan immediately after identifying a cyber incident.

.NET Framework 3.5, 3.0, 2.0 is disabled or removed

Ensure older versions of .NET Framework (3.5, 3.0, 2.0) are turned off or uninstalled.

Ensure Windows PowerShell 2.0 is disabled or removed

Disable or remove Windows PowerShell 2.0 to enhance security.

PowerShell is configured to use Constrained Language Mode

Limit PowerShell's capabilities to reduce security risks.

Analyse event logs from non-internet-facing servers for cyber threats

Regularly check server logs not exposed to the internet for signs of hacking.

Timely Analysis of Workstation Event Logs for Cybersecurity

Quickly analyse workstation logs to detect security issues.

Back to the full Essential Eight mitigation strategies control list, or browse the complete control library.