No, the Essential 8 is not mandatory. It is a set of cybersecurity strategies and controls recommended by the Australian Signals Directorate (ASD) to enhance the security posture of organizations. However, organizations are encouraged to adopt these measures to protect their systems and data from cyber threats.