Today’s LiveWire Spotlight deals with FERC’s approval of the Supply Chain Standards; including CIP-005-7, CIP-010-4, and CIP-013-2. The Commission agrees that the updates satisfy their directives from Order 850 to apply vendor procurement, remote access, and software source controls to Electronic Access Control and Monitoring Systems (EACMS) and Physical Access Control Systems (PACS).
CIP-005-7, CIP-010-4, and CIP-013-2 will take effect in the U.S. on October 1, 2022. By that time, Responsible Entities with high and medium-impact assets must have updated their supply chain security processes to include EACMS and PACS.