Essential Eight Assessment Workflow
An assessment workflow combining automated endpoint evidence collection with structured reporting for controls that require broader organisational review.
The problem
Reviewing endpoint posture device by device was repetitive and could take roughly two to three days. Evidence was scattered, collection coverage was difficult to see, and endpoint observations still needed to be kept separate from organisation-wide certification.
How the parts work together
The workflow automates repeatable endpoint checks with PowerShell, sends structured JSON through an API, and brings the evidence into the CRM-side application for coverage review, scoring, findings, report generation, and remediation planning.
Repeatable endpoint checks
PowerShell gathers the endpoint observations that can be collected consistently and submits structured results through the API.
Where I contributed
- 01
Worked with practical PowerShell collection scripts and the wider JavaScript/Express application flow.
- 02
Helped shape output that separates endpoint posture from broader organisational and Microsoft 365 controls.
- 03
Used explicit evidence-coverage states so missing, partial, failed, and successful collection remain visible.
Decisions that shaped it
Expose coverage
A report should show where evidence was collected successfully and where conclusions remain limited.
Separate measures
Keep ASD maturity framing distinct from a narrower endpoint-assessable posture percentage.
Connect findings to action
Organise results into risks and prioritised remediation rather than producing a collection dump.
Result and scope
The tool replaced much of the repetitive device-by-device collection with a consistent assessment path while keeping manual review and coverage limits visible. Client scores, device details, screenshots, dates, and remediation specifics remain private.
Reference material
Confidential assessment report
The private report records the assessment structure and coverage boundaries; client content is not published.
Assessment pathway
A neutral process view explains collection-to-remediation without reproducing the report's visual design or data.
Technology in context
- PowerShell
- JavaScript
- Express.js
- REST API
- Vue 3