ASD Essential Eight + ASD AI guidance

ASD Essential Eight + ASD AI guidance — 100% of in-scope requirements covered.

4 requirements · 4 in scope (4 enforced). The 100% is weighted over the in-scope base.

ASD Essential Eight + ASD AI guidance: requirement → the KYE™ artefact that enforces it

Demo data

You learn: Which requirements KYE™ enforces at runtime and with which artefact. You can: Walk the requirements.

  1. e8-restrict-admin · enforced

    Essential Eight — Restrict administrative privileges (least-privilege administration, validated and…

    Audit events: kye.purpose.admissibility.v1, kye.risk.authority_register.v1 · Constitution: 12 purpose permission

  2. e8-mfa · enforced

    Essential Eight — Multi-factor authentication for privileged and high-risk actions

    Audit events: kye.purpose.admissibility.v1, kye.evidence.decision_map.v1 · Constitution: 12 purpose permission

  3. e8-monitoring · enforced

    Essential Eight + ASD AI guidance — centralised, tamper-evident logging and monitoring of security-relevant…

    Audit events: kye.evidence.pack.v1, kye.replay.context_seal.v1 · Constitution: 30 audit worm retention, 35 streaming logs

  4. asd-ai-supply-chain · enforced

    ASD 'Engaging with Artificial Intelligence' guidance — understand and govern the AI supply chain, including…

    Audit events: kye.risk.authority_register.v1, kye.evidence.tool_call.v1 · Constitution: 21 delegated auditability

How this widget is built
Demonstrates
KYE™ Compliance Mapping Rail™
Components
  • Framework requirement (clause)
  • Coverage status
  • KYE™ enforcement artefact (event, decision-record field, Evidence Pack™ entry)
Flow
Clause → status → the KYE™ artefact that enforces it, enforced requirements first. Architecture diagram
Used on

Source: Australian Signals Directorate (ASD) / Australian Cyber Security Centre (ACSC) Essential Eight Maturity Model (November 2023 release) + ASD 'Engaging with Artificial Intelligence' guidance (2024). Scoped to the mitigation strategies KYE™'s runtime-authority + evidence layer can enforce for the AI-agent action path. · License: ASD/ACSC publications are Commonwealth of Australia works published under CC BY 4.0.

By category

CategoryReqsEnforcedDesignedAdvisoryDeferredCoverage
Restrict administrative privileges11000100%
Multi-factor authentication11000100%
Monitoring, logging & detection11000100%
AI supply-chain governance11000100%

Every requirement → the KYE™ artefact that enforces it

IDTitleStatusKYE™ enforcement
asd-essential-eight.e8-restrict-adminEssential Eight — Restrict administrative privileges (least-privilege administration, validated and time-bound privileged access)enforcedaudit_events: kye.purpose.admissibility.v1, kye.risk.authority_register.v1
engines: internal, internal
constitution_refs: constitution/12-PURPOSE-PERMISSION.md
asd-essential-eight.e8-mfaEssential Eight — Multi-factor authentication for privileged and high-risk actionsenforcedaudit_events: kye.purpose.admissibility.v1, kye.evidence.decision_map.v1
engines: internal
constitution_refs: constitution/12-PURPOSE-PERMISSION.md
asd-essential-eight.e8-monitoringEssential Eight + ASD AI guidance — centralised, tamper-evident logging and monitoring of security-relevant events for detection and incident responseenforcedaudit_events: kye.evidence.pack.v1, kye.replay.context_seal.v1
engines: internal, internal
constitution_refs: constitution/30-AUDIT-WORM-RETENTION.md, constitution/35-STREAMING-LOGS.md
asd-essential-eight.asd-ai-supply-chainASD 'Engaging with Artificial Intelligence' guidance — understand and govern the AI supply chain, including which components and authorities an AI system acts underenforcedaudit_events: kye.risk.authority_register.v1, kye.evidence.tool_call.v1
engines: internal, internal
constitution_refs: constitution/21-DELEGATED-AUDITABILITY.md

Canonical KYE™ surfaces referenced on this page: KYE Protocol™.