Energy Dept. releases cyber maturity model update, informed by real-world testing with private sector partners

The Department of Energy has updated its Cybersecurity Capability Maturity Model, a self-evaluation tool designed to determine priority areas to address vulnerabilities, following real-world testing with industry players from the electric, oil and natural gas sectors.

C2M2 Version 2.1 contains “important refinements to the model based on real-world testing and user feedback of Version 2.0, released in July 2021,” DOE’s Office of Cybersecurity, Energy Security, and Emergency Response said a Thursday announcement.

“This refresh of the C2M2 included two phases...