Strengthen Essential 8 maturity

⁠⁠⁠Strengthening Essential 8 maturity, improving documentation, implementing external cyber security audit recommendations

• Investigate the methods and provide a solution for implementation of applying operating system patches including the pre-deployment testing and post completion checks and verification. Create comprehensive guidelines and procedures based on the outcome.
• Using a supplied audit of all operating systems and applications in use at the Library determine the application and OS versions continue to be vendor supported.
• Implement macro blocking for unauthorised users and trusted locations for authorised users running macros.
• Investigate options to subject un-signed .dll files to whitelisting in an efficient manner.
• Document privileged access management processes.
• Create backup procedure documentation and backup storage guidelines (including recommendations for disaster recovery testing).
• Audit the current SOE hardening settings and review their appropriateness, provide recommendations for improvement based on the outcome.