DOE Updates its 2012-Vintage Cybersecurity Capability Maturity Model
The Department of Energy has released version 2 its Cybersecurity Capability Maturity Model (C2M2), a tool initially released in 2012 to help companies evaluate and improve their cybersecurity capabilities. The update is part of the Biden administration’s Industrial Control Systems Cyber Initiative, a 100-day plan to address international cyber threats to critical infrastructure. DOE worked with the Commerce Department’s National Institute of Standards and Technology in updating the tool.
DOE is also working with CISA on the initiative. House Homeland Security Committee Ranking Member John Katko has introduced the DHS Industrial Control Systems Capabilities Enhancement Act, which would codify CISA’s role in securing industrial control systems.
Sources:
