Target Level Confirmation: Confirm the target Maturity Level (ML) required for your contracts or risk profile. 

Scope Definition: Define the exact assessment boundary (systems, networks, and applications) covered by the audit, ensuring it aligns with the E8 scope (typically Windows-based, internet-connected networks). 

Technical Testing: Review and configuration testing of systems to determine if controls are enforced (e.g., verifying Application Control whitelists, checking patch history). 

Documentation Review: Examination of all supporting policies, standards, and procedures to ensure they are formalised, approved, and align with the claimed ML. 
Control Effectiveness: For each of the eight controls, we verify that the implementation is not only present but effective—a key requirement for achieving any Maturity Level. 

Findings Report: Detailed, technical report documenting where each of the eight mitigation strategies meets or fails the requirements of the target Maturity Level. 

Formal Attestation: Provision of a signed audit report that formally attests to your current Essential Eight Maturity Level (ML0-ML3). 
Recommendations: Delivery of prioritised recommendations for closing any identified gaps, ensuring you have a clear path to achieve the required ML.