draft-hillier-certisyn-essential-eight-verified
Essential Eight Verified -- A Cryptographic Verification Standard for the ACSC Essential Eight Maturity Model
This document specifies a verification standard for the cryptographic
attestation of conformance to the Australian Cyber Security Centre
(ACSC) Essential Eight Maturity Model. It defines the Verification
Reconciliation Object (VRO), the issuing-partner framework, the
evidence categories required for each of the eight controls of the
Essential Eight, the three maturity-attestation levels, and the
cryptographic continuity requirements that together produce
deterministic, independently reconstructable, auditor-grade
attestations of cybersecurity posture. The standard sits beneath the
ACSC Essential Eight Maturity Model and produces the verifiable
artefact the model was designed to imply but does not deliver.