CONNECTING ORGANIZATION SUMMARY. The Department of Energy (DOE) is a Cabinet level Federal Government department with a broad array of energy-related missions. As a sector specific agency, DOE maintains substantial cybersecurity outreach programs with the Energy Sector. The DOE Cyber Fed Model (CFM) provides machine-to-machine sharing of cyber data and information; it serves the whole of the Department, and is interconnected under separate agreements with other cybersecurity systems and services operated by DOE, other Federal Government agencies, and the Energy Sector. Of particular note, agreements required for the operation of the DOE Cybersecurity Risk Information Sharing Program (CRISP), which provides for exchange of actionable cybersecurity information with the Energy Sector ISACs and asset owners, are maintained separately from this agreement. The CRISP program maintains a robust data sharing matrix appropriate to the Energy Sector, ISAC, and the Department.
