Many organisations believe they are operating at Essential Eight ML2 or ML3. In reality, their SaaS resilience sits closer to ML0–ML1. This 2026 briefing explains why - and how Essential Eight must evolve for identity-driven, SaaS-dependent operations.

Boards are now accountable for cyber resilience - not just strategy. Australia’s ACSC 2025–26 Cyber Security Priorities make recoverability, sovereignty, and proof of control board-level obligations. Discover how FullBackup and Keepit help directors demonstrate CPS 230, Essential Eight, and SOCI-ready resilience.