VMware and the Essential Eight

VMware recommends that organisations should focus their effort on achieving the intended security outcome for each of the Essential Eight controls, rather than focusing only on the specific methods that are discussed in the Maturity Model documentation. A focus on outcomes will help to ensure that the organisation achieves the risk-reduction objectives of the Essential Eight, and can effectively justify the control approach to auditors if the Essential Eight maturity levels are being formally assessed.

This whitepaper provides an overview of VMware’s guidance in relation to the ACSC Essential Eight Maturity Model, and where this is relevant across all VMware products.