NERC Proposes To Reduce Cybersecurity Risks In CIP Supply Chains

The proposed Reliability Standards focus on vulnerabilities in vendor products and services and would regulate the utility procurement process.

On September 26, the North American Electric Reliability Corporation (NERC) petitioned the Federal Energy Regulatory Commission (FERC or the Commission) for approval of a suite of Reliability Standards addressing supply chain cybersecurity risk management (the Petition). The proposed Reliability Standards—CIP-013-1 (Supply Chain Risk Management), CIP-005-6 (Electronic Security Perimeter(s)), and CIP-010-3 (Configuration Change Management and Vulnerability Assessments)—respond to the Commission's directive in Order No. 829 directing NERC to develop Reliability Standards addressing cybersecurity risks in the supply chains supporting utility control systems.