FERC to Improve Supply Chain Vendor Cybersecurity

A proposed rule from the Federal Energy Regulatory Commission aims to improve the cybersecurity of supply chain vendors to protect them against malware attacks that can threaten the bulk electric system.

FERC is seeking comments on the proposed rule, which would revise seven of the critical infrastructure protection (CIP) reliability standards proposed by the North American Electric Reliability Corp. (NERC).

In the proposal, FERC is directing NERC to develop a new reliability standard to provide security controls for supply chain management of control system hardware, software and service associated with the bulk electric system.

“This proposed rule addresses an ...