meta_id 3240667

On June 15, 2026, the Australian Cyber Security Centre (ACSC) launched a consultation on the evolution of the Essential Eight cyber security framework. The ACSC is consulting with its Cyber Security Network partners on proposed changes that will introduce a new Essentials series, expanding the current framework to provide organisations with greater flexibility in implementing cyber security while maintaining a clear path to achieving strong cyber resilience. The new Essentials series will be grounded in the Information Security Manual (ISM) and will offer prioritised, threat-informed mitigations for contemporary technology environments. The guidance will be supported by practical tools and clear implementation guidance. Organisations already using the Essential Eight can expect strong alignment with their existing controls and investments, while new adopters will benefit from established best-practice guidance. The evolution of the current Essential Eight guidance will form the first chapter of the series—Essentials for enterprise IT—with additional chapters to follow. The ACSC is undertaking national consultation with government, industry, regulators, and organisations that currently use the Essential Eight. The consultation marks an important step in strengthening Australia's cyber resilience, ensuring guidance keeps pace with emerging threats and advances in defensive capabilities. Community feedback will play an important role in shaping the future development of the Essentials series. The consultation period runs until July 12, 2026. Organisations can submit feedback via the ACSC Cyber Security Partnership Program portal. Further information about the Partnership Program is available at cyber.gov.au/partnershipprogram.