Supply Chain Risk Management Reliability Standards

The Federal Energy Regulatory Commission (Commission) approves supply chain risk management Reliability Standards CIP-013-1 (Cyber Security--Supply Chain Risk Management), CIP-005-6 (Cyber Security-- Electronic Security Perimeter(s)) and CIP-010-3 (Cyber Security-- Configuration Change Management and Vulnerability Assessments) submitted by the North American Electric Reliability Corporation (NERC). In addition, the Commission directs NERC to develop and submit modifications to the supply chain risk management Reliability Standards so that the scope of the Reliability Standards include Electronic Access Control and Monitoring Systems.