C2M2 - Cybersecurity Capability Maturity Model (C2M2) (v2.1)

Overview

The US Department of Energy's Cybersecurity Capability Maturity Model for evaluating and improving cybersecurity programs.

✓Control mapping — map your controls once and reuse the evidence across every overlapping framework you fall under.
✓Gap assessment — see exactly where you stand against each requirement, with a prioritised list of what to fix first.
✓Deadline tracking — track readiness against key dates and assign owners so nothing slips.
✓Continuous monitoring — get alerted the moment a tool, vendor or control drifts out of compliance.