
The Electricity Subsector Cybersecurity Capability Maturity Model, published May 31, covered 10 cyber domains, including risk management, identity and access management, situational awareness and program management.
White House Cybersecurity Coordinator Howard Schmidt said that the guide will evaluate cybersecurity capabilities and enable utilities to prioritize their actions and their cybersecurity investments, according to Molly Bernhart Walker’s report.
Four maturity indicator levels in the model will require utilities to meet criteria at one level and a preceding level.
Seventeen utilities tested the pilot to determine if the model provides a basis for evaluation and to collect feedback for improvement, Walker reported.