The latest guidelines were developed in synchronization with the AES Cyber Program’s strategic roadmap and evolving cyber risks, and are based on industry standards such as the U.S. Department of Energy’s Capability Maturity Model, SANS Institute Critical Controls and the U.S. National Institute of Standards and Technology (NIST) Cybersecurity Framework.