iso27diy-corp/Corpus/Standards/other/C2M2 Cybersecurity Capability Maturity.md

Cybersecurity Capability Maturity Model (C2M2) was developed for the US Energy sector, sponsored by the United States Department of Energy (DOE).

It looks equally at both information technology (IT) and operations technology (OT).

Documentation, tools, practices and self-evaluation tools can be found through energy.gov and on doe.gov.

Related:

• OT Security
• IEC 62443 Cybersecurity for operational technology in automation and control systems