the Essential Eight outlines a minimum set of preventative measures, organisations need to implement additional measures