National Library’s Digital Branch has been undertaking several cyber improvement initiatives, including the implementation of security controls pertaining to Essential Eight Maturity Level One in recent days. While the cyber improvement initiatives remain ongoing, the implementation of these security controls is expected to be completed by 30 June 2025.

The Digital Branch has identified that it needs to validate the implementation of these security controls in July/August 2025. Hence, National Library is seeking an external service provider to conduct an Essential Eight Maturity assessment, using quantitative testing techniques as recommended by the Australian Cyber Security Centre (ACSC).

This assessment will cover the following components within our IT environment:

• Windows Environment, including all endpoints (desktop and laptops) and servers.
• Linux Environment, including all endpoints (desktop and laptops) and servers.
• macOS Devices, including desktops and laptops.
• Network Appliances such as firewalls, routers, switches etc.

The assessment deliverables:

• Essential Eight Maturity Assessment (Quantitative Approach).
• Assessment Report, including executive summary, detailed findings and recommendations.