Security Bulletin – DOE releases C2M2 Version 2.1

As of June 2022, the U.S. Department of Energy (DOE) released version 2.1 of the Cybersecurity Capability Maturity Model (C2M2) enables organizations to evaluate their cybersecurity capabilities and optimize security investments. A free, user-friendly C2M2 Self-Evaluation Tool is available on both an HTML and a PDF platform. The two versions of the tool both offer interactive features and help text, allow users to securely record results, and automatically generate a detailed, graphical report.

Additional information on the C2M2 Cybersecurity Capability Maturity Model can be accessed by the following links:

Link: DOE C2M2 Release Announcement

Link: C2M2 Cybersecurity Capability Maturity Model Documentation

Link: C2M2 V2.1 HTML-Based Tool

Link: C2M2 PDF-Based Tool Request

TLP: WHITE