TIM-8335 v2

North American Electric Reliability Corporation. (2025, February 12). 2024 Organization Registration and Certification Program and Compliance Monitoring and Enforcement Program Annual Report.
This NERC annual report provides an overview of cybersecurity compliance performance and enforcement activities within the North American bulk electric system during 2024, highlighting key risks and lessons learned in meeting mandatory reliability standards, including cybersecurity-related ones.

Zero Trust Maturity Model | CISA. (n.d.). Retrieved April 23, 2025, from https://www.cisa.gov/zero-trust-maturity-model
This web page provides information about the zero-trust maturity model as used to prevent unauthorized access to data and services at a granular level.

Office of Cybersecurity, Energy Security, and Emergency response. (n.d.). Cybersecurity capability maturity model (C2M2). Energy.gov.
This webpage provides information on C2M2, a tool used to evaluate and improve cybersecurity for organizations of all sectors, types, and sizes to evaluate and make improvements to their cybersecurity programs and strengthen their operational resilience.

National Institute of Standards and Technology. (2024, February 26). The NIST Cybersecurity Framework (CSF) 2.0.
The NIST Cybersecurity Framework (CSF) 2.0 provides voluntary guidance to help organizations across all sectors, including critical infrastructure, understand, manage, and reduce their cybersecurity risks through a taxonomy of high-level outcomes and a flexible implementation approach.

United States Department of State. (2024, May). United States international cyberspace & digital policy strategy. https://2021-2025.state.gov/united-states-international-cyberspace-and-digital-policy-strategy/
This official strategy document outlines the United States' comprehensive approach to promoting an open, secure, and resilient global digital ecosystem and advancing its interests through international cyberspace and digital policy.

Brezavšček, A., & Baggia, A. (2025). Recent trends in information and cybersecurity maturity assessment: A systematic literature review. Systems, 13(1), 52.
This article presents a systematic review of literature on information and cybersecurity maturity assessment trends from 2012 to 2024.

Liyanage, L., Arachchilage, N. A. G., & Russello, G. (2024). SoK: Identifying limitations and bridging gaps of cybersecurity capability maturity models (CCMMs). Manuscript submitted to ACM.
This paper provides a systematic literature review analyzing cybersecurity capability maturity models, their limitations, and implementation challenges.

Cyber Security Brunei. (2024, May). Guidelines for auditing & conducting cybersecurity risk assessment for critical information infrastructure v2.0.
These guidelines provide a methodology for auditing and conducting cybersecurity risk assessments specifically tailored for critical information infrastructure, outlining practical steps to evaluate cybersecurity posture and manage risks.

National Institute of Standards and Technology. (2024, February 26). The NIST Cybersecurity Framework (CSF) 2.0.
The NIST Cybersecurity Framework (CSF) 2.0 provides voluntary guidance to help organizations across all sectors, including critical infrastructure, understand, manage, and reduce their cybersecurity risks through a taxonomy of high-level outcomes and a flexible implementation approach.

Understanding Cyber War. (2024, September). Assessment of national cyber capabilities: What is the level of cybersecurity maturity of Ukraine according to the ENISA methodology?
This report assesses Ukraine's national cyber capabilities and cybersecurity maturity based on the ENISA methodology, evaluating a country's cybersecurity posture at the national level.

International Telecommunication Union. (n.d.). Global Cybersecurity Index. Retrieved April 30, 2025, from https://www.itu.int/epublications/publication/global-cybersecurity-index-2024
The ITU Global Cybersecurity Index webpage describes a trusted reference that measures and assesses the commitment and capability of countries to cybersecurity at a global level across five key pillars.