Skip to content
Cyber Compliance

Essential Eight → GLBA crosswalk

A control-by-control mapping between ACSC Essential Eight and GLBA Safeguards Rule (16 CFR Part 314). 4 mappings.

Essential EightGLBARelationshipNotes
E8-1
Patch applications
§314.4(d)
Regularly test or monitor safeguards
PartialCurated
Vulnerability management
E8-2
Patch operating systems
§314.4(d)
Regularly test or monitor safeguards
PartialCurated
Vulnerability management
E8-3
Multi-factor authentication
§314.4(c)(1)
Access controls
PartialCurated
Access control & identity
E8-4
Restrict administrative privileges
§314.4(c)(1)
Access controls
PartialCurated
Access control & identity

Mappings marked “Official” derive from standards-body informative references; “Curated” mappings are authored by Cyber Compliance and provided for guidance only.