U.S. Dept. of Energy Seeks Comment on Updated Cybersecurity Capability Maturity Model

Dec 1, 2021

Reading Time : 1 min

DOE first developed C2M2 in 2012 in partnership with the U.S. Department of Homeland Security and in collaboration with industry, private-sector and public-sector experts.1 Version 1.1 came in 2014, with separate versions targeted for the electricity and oil and natural gas subsectors. Version 2.0 is “designed for use across the energy sector, and can be used by other critical infrastructure sectors as well.” It includes “input from the Energy Sector C2M2 Working Group, which comprises 145 energy sector cybersecurity practitioners representing 77 energy sector and cybersecurity organizations.” According to DOE, it “better addresses new technologies like cloud, mobile, and artificial intelligence,” as well as “evolving threats such as ransomware and supply chain risks.” Since July, DOE has been piloting Version 2.0 with energy companies and utilities and now seeks to “obtain the broadest possible input” to “inform the C2M2 Working Group as it develops future model updates.” In particular, DOE seeks input on:

  • “The usefulness of C2M2 practices in evaluating and improving cybersecurity program capabilities.”
  • “The applicability of practice language to the IT and OT environments in use by energy sector organizations.”
  • “The readability of and ability to understand practice language.”
  • “The completeness of cybersecurity domains, objectives, and practices [in] the C2M2.”
  • “The effectiveness of guidance documentation (e.g., model introduction sections, domain introductions, and appendices) in conveying model concepts, architecture, and how to use the model.”
  • “Any other potential improvements to the C2M2 documentation or practices contained therein.”

Interested entities can submit comments to C2M2@hq.doe.gov using the Comment Submission Form available here.


1 See https://www.energy.gov/ceser/cybersecurity-capability-maturity-model-c2m2.

Share This Insight

Previous Entries

Speaking Energy

November 12, 2025

On November 7, 2025, the New York Department of Environmental Conservation (NYSDEC) and the New Jersey Department of Environmental Protection (NJDEP) reversed their prior positions and approved Clean Water Act (CWA) Section 401 Water Quality Certifications and other environmental permits for the Transcontinental Gas Pipeline Company’s (Transco) Northeast Supply Enhancement Project (NESE). NESE is a 25-mile natural gas pipeline expansion project certificated by the Federal Energy Regulatory Commission (FERC) that is intended to deliver 400,000 dekatherms per day of natural gas produced in Pennsylvania to local distribution company customers in New York City through new facilities in Middlesex County, New Jersey and an underwater segment traversing the Raritan and Lower New York Bays.

...

Read More

Speaking Energy

November 6, 2025

The market for the direct procurement of energy by commercial and industrial buyers has been active in the U.S. for a decade.  In years past, buyers often engaged in such purchases on a voluntary basis to achieve their goals to use renewable energy.  These days, C&I buyers are turning to direct procurement or self-supply to obtain a reliable source of energy.  Sufficient and accessible energy from a local utility may not be available or may be materially delayed or trigger significant capital costs.  This is a material change driven in part by increased demand for electricity, including demand from data centers, EV infrastructure and industrial development.       

...

Read More

Speaking Energy

October 27, 2025

On October 23, 2025, the Secretary of the U.S. Department of Energy (DOE) directed the Federal Energy Regulatory Commission (FERC) to conduct a rulemaking to assert jurisdiction over load interconnections to the bulk electric transmission system and establish standardized procedures for the interconnection of large loads.1 The Directive included an advanced notice of proposed rulemaking (ANOPR) that sets forth the legal justification for asserting jurisdiction over transmission-level load interconnections and fourteen principles that should inform FERC’s rulemaking process. The Secretary has directed FERC to take “final action” on the Directive no later than April 30, 2026.

...

Read More

Speaking Energy

October 24, 2025

On October 21, 2025, the U.S. Department of Energy (DOE) issued a final order (DOE/FECM Order No. 5264-A1) granting Venture Global CP2 LNG, LLC long-term authorization to export up to 1,446 billion cubic feet per year of domestically produced liquefied natural gas (LNG) from its Louisiana facility to countries without a free trade agreement with the United States (Non-FTA Countries). The final order follows a March 2025 Conditional Order,2 which issued while DOE was still completing its review of the agency’s 2024 LNG Export Study.3 The final order confirms that the project’s export volume and term authorization (through December 31, 2050) are unchanged, but provides for a three-year “make-up period” to allow export of any approved volume not shipped during the original term.

...

Read More

© 2025 Akin Gump Strauss Hauer & Feld LLP. All rights reserved. Attorney advertising. This document is distributed for informational use only; it does not constitute legal advice and should not be used as such. Prior results do not guarantee a similar outcome. Akin is the practicing name of Akin Gump LLP, a New York limited liability partnership authorized and regulated by the Solicitors Regulation Authority under number 267321. A list of the partners is available for inspection at Eighth Floor, Ten Bishops Square, London E1 6EG. For more information about Akin Gump LLP, Akin Gump Strauss Hauer & Feld LLP and other associated entities under which the Akin Gump network operates worldwide, please see our Legal Notices page.