Essential Eight for a Hobart dental group
Multi-chair dental group, 14 staff
The problem
Facing a cyber-insurance premium increase, the group needed Essential Eight Maturity Level 3 evidence and had zero in-house IT. Two prior ransomware scares at neighbouring practices had put security on the board agenda.
What we did
We ran the gap assessment in week one, then executed in priority order: application allow-listing, MFA on all cloud and admin accounts, immutable backups with a tested restoration, and secure configuration baselines. Evidence was packaged control-by-control for the insurer.
The outcome
Level 3 achieved in 6 weeks with zero disruption to patient hours. The insurer renewed at a reduced premium, and the group's first backup restoration test (a 'real' one) completed in 40 minutes.
