The US Federal Energy Regulatory Commission (FERC) has published a Final Rule directive which requires the North American Electric Reliability Corporation ‘to develop a new or modified Reliability Standard that addresses supply chain risk management for industrial control systems , especially the hardware, software, and computing and networking services associated with bulk electric system operations.’
FERC states that the resulting Reliability Standard will assist operating organizations in mitigating the risk of a cybersecurity incident affecting the reliable operation of the bulk-power system.
Source: FERC