Many organisations believe they are operating at Essential Eight ML2 or ML3. In reality, their SaaS resilience sits closer to ML0–ML1. This 2026 briefing explains why - and how Essential Eight must evolve for identity-driven, SaaS-dependent operations.

Parallel ransomware groups are hitting organisations at the same time and almost all of them break in through identity. This article unpacks why identity resilient backup architecture is now essential for SaaS, identity systems, and infrastructure, and why in-tenant backups can’t survive modern attacks.

Salesforce doesn’t guarantee recovery. For Australian enterprises, compliance frameworks like CPS 230 and the Essential Eight make independent Salesforce backup and recovery essential. Learn why resilience depends on immutable, independent protection.

SaaS uptime isn’t the same as recovery. Microsoft 365, Google Workspace, Salesforce, and Dynamics 365 all keep services online — but none guarantee data restoration. Under CPS 230 and the Essential Eight, organisations must prove independence, immutability, sovereignty, and testing. This guide shows why recoverability matters, how Keepit delivers it, and what to demand from your SaaS backup vendor.

Atlassian’s native backup for Jira and Confluence is limited. FullBackup resells Keepit, delivering immutable, Australia-based protection and fast, granular recovery.