Ensuring a thorough understanding of an organisation's cybersecurity posture is vital in understanding the risk of the organisation, and how it can best defend against cyber criminals in today's threat landscape. Discovering and addressing vulnerabilities, risky applications and high-risk users within a company can help to formulate a cyber defence strategy. Utilising industry standard frameworks such as the ASD Essential 8 helps to enable Small-Medium Businesses implement controls and understand their risk profile.