One of the eight mitigation strategies in the Essential Eight, checked against 8 tests at Maturity Level One.
This strategy keeps the operating systems on workstations, servers and network equipment patched, and retires versions the vendor no longer supports.
Why it matters
An unpatched server exposed to the internet is among the most common ways organisations get compromised. Old, unsupported systems quietly running a critical service are the usual weak spot.
Where Intelligence Group fits
- Inventory every operating system, including servers and appliances
- Patch internet-facing systems first, inside the required window
- Scan regularly for missing operating system patches
- Replace or isolate operating systems that are out of support
- Keep patch timelines as evidence
Where Intelligence Group fits
Intelligence Group rates this strategy from the evidence your organisation already generates, reports the maturity level it supports, and sets out the next step to lift it.
Official guidance: ASD Essential Eight Maturity Model