All frameworks AU

ASD Essential Eight Maturity Model (November 2023)

The Australian Signals Directorate's prioritized baseline — eight mitigation strategies across four maturity levels. The November 2023 revision bolstered MFA to require PHISHING-RESISTANT MFA, citing FIDO2/WebAuthn by name, and pulled that requirement down to a lower maturity level. Only eight strategies exist, so most hardware domains here are simply outside its scope.

Australian government entities and their suppliers, AU critical infrastructure

control domains mapped

products applicable

other frameworks cross-mapped

Official doc

ASD Essential Eight Maturity Model (November 2023)

E8-MFA Multi-factor authentication — phishing-resistant MFA required (the November 2023 revision cites FIDO2/WebAuthn)

Phishing-resistant MFA using hardware security keys. Software TOTP and SMS are explicitly excluded from "phishing-resistant" in NIST 800-63B and most modern framework guidance.

Products that satisfy this control:

Security key Nitrokey 3C NFC $80 Security key Nitrokey 3A NFC $75 Hardware security module Nitrokey HSM 2 $135 Security key Nitrokey 3A Mini $65 Security key Nitrokey Passkey $60 Security key Nitrokey 3A (No NFC) $90 Security key Nitrokey 3C (No NFC) $90 Amazon affiliate YubiKey Developer board Nitrokey 3A NFC Hacker $100

Same control in other frameworks:

NIST 800-53 IA-2(6) NIST CSF 2.0 PR.AA-03 ISO 27001 A.8.5 SOC 2 CC6.1 NIS2 Art.21(2)(i) CMMC 2.0 IA.L2-3.5.3 CIS Controls v8 CIS-6.3 PCI DSS 4.0.1 8.4.2 HIPAA Security Rule §164.312(d) DORA Art. 9(4)(d) Cyber Essentials CE-4

E8-Backups Regular backups — retained and stored securely so they survive a destructive event

UL 72 fire-rated safes keep interiors under 350°F through 30-minute to 4-hour furnace exposure — plus explosion and 30-foot drop tests — so original records, storage media, seed-phrase plates, and offline backups survive a facility fire. Distinct from burglary protection: enterprises with records-retention or continuity obligations typically need BOTH ratings on one unit (dual-rated Gardall UL line or TL-rated composite safes — see /safe).

Products that satisfy this control:

Physical Safe & vault

Same control in other frameworks:

NIST 800-53 MP-4 NIST CSF 2.0 PR.IR-02 ISO 27001 A.7.5 SOC 2 A1.2 NIS2 Art.21(2)(c) CMMC 2.0 MP.L2-3.8.1 CIS Controls v8 CIS-11.3 HIPAA Security Rule §164.310(d)(1)

Also mapped to

NIST 800-53 US NIST CSF 2.0 US ISO 27001 Global SOC 2 US NIS2 EU CMMC 2.0 US DoD PCI DSS 4.0.1 Payments HIPAA Security Rule US HHS DORA EU Cyber Essentials UK CIS Controls v8 Global