DISP Essential Eight ML2 Requirements 2026 — What You Must Achieve Before Applying

From 2024, the Australian Signals Directorate requires DISP applicants to demonstrate Essential Eight Maturity Level 2 across all eight mitigation strategies before accreditation is granted. The eight strategies are: application control, patch applications, configure Microsoft Office macro settings, user application hardening, restrict administrative privileges, patch operating systems, multi-factor authentication, and regular backups. ML2 requires each strategy to be implemented consistently across all systems in scope. DISPulse maps your current E8 posture, identifies gaps, and generates your Annual Security Report automatically.