draft-hillier-certisyn-essential-eight-verified

Essential Eight Verified -- A Cryptographic Verification Standard for the ACSC Essential Eight Maturity Model

groupnone stateactive pages13 rev00 expires2026-11-16 canonicalhttps://datatracker.ietf.org/doc/draft-hillier-certisyn-essential-eight-verified/
This document specifies a verification standard for the cryptographic attestation of conformance to the Australian Cyber Security Centre (ACSC) Essential Eight Maturity Model. It defines the Verification Reconciliation Object (VRO), the issuing-partner framework, the evidence categories required for each of the eight controls of the Essential Eight, the three maturity-attestation levels, and the cryptographic continuity requirements that together produce deterministic, independently reconstructable, auditor-grade attestations of cybersecurity posture. The standard sits beneath the ACSC Essential Eight Maturity Model and produces the verifiable artefact the model was designed to imply but does not deliver.