the document titled Cybersecurity Capability Maturity Model and published by the Department of Energy of the United States of America; or