DHS has implemented a cyber maturity model and DoD is using a security scorecard to identify strengths and weaknesses in networks and systems.