Skip to content
MaesterMaester
3.0 preview2.3.0 stable

These docs describe the preview. Pick the version you run and every page marks what it doesn't have yet. Get the preview →
Maester 2.x docs (archived) →

Sponsor

ASD Essential Eight maturity model

View as MarkdownOpen in ChatGPTOpen in Claudellms.txt for the whole site

Version 2026.09.4. The framework. A check that names a requirement in its Control attribute supports it; it does not make the tenant compliant.

14 of 126 requirements have a Maester check. 112 have none yet: a place to contribute, or a requirement that cannot be checked from a tenant.

Run theseInvoke-Maester -Suite asd
Multi-factor authentication2 of 24
ISM-0109ML3No Maester check yetNo check
ISM-0123ML2No Maester check yetNo check
ISM-0140ML2No Maester check yetNo check
ISM-0974ML2No Maester check yetNo check
ISM-1173ML2No Maester check yetNo check
ISM-1228ML2No Maester check yetNo check
ISM-1401ML1No Maester check yetNo check
ISM-1504ML1Multi-factor authentication is used to authenticate human users to their organisation's online services. ASD.ISM-1504Has a check
ISM-1505ML3No Maester check yetNo check
ISM-1679ML1No Maester check yetNo check
ISM-1680ML1No Maester check yetNo check
ISM-1681ML1No Maester check yetNo check
ISM-1682ML2No Maester check yetNo check
ISM-1683ML2No Maester check yetNo check
ISM-1815ML2No Maester check yetNo check
ISM-1819ML2No Maester check yetNo check
ISM-1872ML2Multi-factor authentication used for authenticating human users of online services is phishing-resistant. ASD.ISM-1872Has a check
ISM-1873ML2No Maester check yetNo check
ISM-1874ML3No Maester check yetNo check
ISM-1892ML1No Maester check yetNo check
ISM-1893ML1No Maester check yetNo check
ISM-1894ML3No Maester check yetNo check
ISM-1906ML2No Maester check yetNo check
ISM-1907ML3No Maester check yetNo check
Restrict administrative privileges4 of 29
ISM-0109ML3No Maester check yetNo check
ISM-0123ML2No Maester check yetNo check
ISM-0140ML2No Maester check yetNo check
ISM-0445ML1Privileged user accounts (excluding those explicitly authorised to access online services) are prevented from accessing the internet, email and web services. ASD.ISM-1175Has a check
ISM-1175ML1Privileged user accounts (excluding those explicitly authorised to access online services) are prevented from accessing the internet, email and web services. ASD.ISM-1175Has a check
ISM-1228ML2No Maester check yetNo check
ISM-1380ML1No Maester check yetNo check
ISM-1387ML2No Maester check yetNo check
ISM-1507ML1No Maester check yetNo check
ISM-1508ML3No Maester check yetNo check
ISM-1509ML2No Maester check yetNo check
ISM-1647ML2No Maester check yetNo check
ISM-1648ML2Privileged access to systems and their resources is disabled after 45 days of inactivity. ASD.ISM-1648Has a check
ISM-1649ML3Just-in-time administration is used for the administration of systems and their resources. ASD.ISM-1649Has a check
ISM-1650ML2No Maester check yetNo check
ISM-1685ML2No Maester check yetNo check
ISM-1686ML3No Maester check yetNo check
ISM-1687ML2No Maester check yetNo check
ISM-1688ML1No Maester check yetNo check
ISM-1689ML1No Maester check yetNo check
ISM-1815ML2No Maester check yetNo check
ISM-1819ML2No Maester check yetNo check
ISM-1861ML3No Maester check yetNo check
ISM-1883ML1No Maester check yetNo check
ISM-1896ML3No Maester check yetNo check
ISM-1897ML3No Maester check yetNo check
ISM-1898ML3No Maester check yetNo check
ISM-1906ML2No Maester check yetNo check
ISM-1907ML3No Maester check yetNo check
Application control0 of 19
ISM-0109ML3No Maester check yetNo check
ISM-0123ML2No Maester check yetNo check
ISM-0140ML2No Maester check yetNo check
ISM-0843ML1No Maester check yetNo check
ISM-1228ML2No Maester check yetNo check
ISM-1490ML2No Maester check yetNo check
ISM-1544ML2No Maester check yetNo check
ISM-1582ML2No Maester check yetNo check
ISM-1656ML3No Maester check yetNo check
ISM-1657ML1No Maester check yetNo check
ISM-1658ML3No Maester check yetNo check
ISM-1659ML3No Maester check yetNo check
ISM-1660ML2No Maester check yetNo check
ISM-1815ML2No Maester check yetNo check
ISM-1819ML2No Maester check yetNo check
ISM-1870ML1No Maester check yetNo check
ISM-1871ML2No Maester check yetNo check
ISM-1906ML2No Maester check yetNo check
ISM-1907ML3No Maester check yetNo check
User application hardening4 of 27
ISM-0109ML3No Maester check yetNo check
ISM-0123ML2No Maester check yetNo check
ISM-0140ML2No Maester check yetNo check
ISM-1228ML2No Maester check yetNo check
ISM-1412ML2No Maester check yetNo check
ISM-1485ML1No Maester check yetNo check
ISM-1486ML1No Maester check yetNo check
ISM-1542ML2No Maester check yetNo check
ISM-1585ML1No Maester check yetNo check
ISM-1621ML3No Maester check yetNo check
ISM-1622ML3No Maester check yetNo check
ISM-1623ML2No Maester check yetNo check
ISM-1654ML1Internet Explorer 11 is disabled or removed. ASD.ISM-1654Has a check
ISM-1655ML3No Maester check yetNo check
ISM-1667ML2Microsoft Office is blocked from creating child processes. ASD.ISM-1667Has a check
ISM-1668ML2Microsoft Office is blocked from creating executable content. ASD.ISM-1668Has a check
ISM-1669ML2Microsoft Office is blocked from injecting code into other processes. ASD.ISM-1669Has a check
ISM-1670ML2No Maester check yetNo check
ISM-1815ML2No Maester check yetNo check
ISM-1819ML2No Maester check yetNo check
ISM-1823ML2No Maester check yetNo check
ISM-1824ML2No Maester check yetNo check
ISM-1859ML2No Maester check yetNo check
ISM-1860ML2No Maester check yetNo check
ISM-1889ML2No Maester check yetNo check
ISM-1906ML2No Maester check yetNo check
ISM-1907ML3No Maester check yetNo check
Patch applications0 of 14
ISM-0304ML3No Maester check yetNo check
ISM-1690ML1No Maester check yetNo check
ISM-1691ML1No Maester check yetNo check
ISM-1692ML3No Maester check yetNo check
ISM-1693ML2No Maester check yetNo check
ISM-1698ML1No Maester check yetNo check
ISM-1699ML1No Maester check yetNo check
ISM-1700ML2No Maester check yetNo check
ISM-1704ML1No Maester check yetNo check
ISM-1807ML1No Maester check yetNo check
ISM-1808ML1No Maester check yetNo check
ISM-1876ML1No Maester check yetNo check
ISM-1901ML3No Maester check yetNo check
ISM-1905ML1No Maester check yetNo check
Patch operating systems1 of 17
ISM-1407ML3No Maester check yetNo check
ISM-1501ML1No Maester check yetNo check
ISM-1694ML1No Maester check yetNo check
ISM-1695ML1Patches for vulnerabilities in the operating systems of workstations are applied within one month of release. ASD.ISM-1695Has a check
ISM-1696ML3No Maester check yetNo check
ISM-1697ML3No Maester check yetNo check
ISM-1701ML1No Maester check yetNo check
ISM-1702ML1No Maester check yetNo check
ISM-1703ML3No Maester check yetNo check
ISM-1807ML1No Maester check yetNo check
ISM-1808ML1No Maester check yetNo check
ISM-1877ML1No Maester check yetNo check
ISM-1879ML3No Maester check yetNo check
ISM-1900ML3No Maester check yetNo check
ISM-1902ML3No Maester check yetNo check
ISM-1903ML3No Maester check yetNo check
ISM-1904ML3No Maester check yetNo check
Restrict Microsoft Office macros3 of 11
ISM-1487ML3No Maester check yetNo check
ISM-1488ML1Microsoft Office macros in files originating from the internet are blocked. ASD.ISM-1488Has a check
ISM-1489ML1No Maester check yetNo check
ISM-1671ML1No Maester check yetNo check
ISM-1672ML1Microsoft Office macro antivirus scanning is enabled. ASD.ISM-1672Has a check
ISM-1673ML2Microsoft Office macros are blocked from making Win32 API calls. ASD.ISM-1673Has a check
ISM-1674ML3No Maester check yetNo check
ISM-1675ML3No Maester check yetNo check
ISM-1676ML3No Maester check yetNo check
ISM-1890ML3No Maester check yetNo check
ISM-1891ML3No Maester check yetNo check
Regular backups0 of 11
ISM-1511ML1No Maester check yetNo check
ISM-1515ML1No Maester check yetNo check
ISM-1705ML2No Maester check yetNo check
ISM-1706ML3No Maester check yetNo check
ISM-1707ML2No Maester check yetNo check
ISM-1708ML3No Maester check yetNo check
ISM-1810ML1No Maester check yetNo check
ISM-1811ML1No Maester check yetNo check
ISM-1812ML1No Maester check yetNo check
ISM-1813ML3No Maester check yetNo check
ISM-1814ML1No Maester check yetNo check
Maester is free and open source under the MIT licence.SponsorContributorsDiscordMaester Cloud