WASHINGTON, D.C. – At its monthly open meeting, the Federal Energy Regulatory
Commission (FERC) approved proposed Reliability Standard CIP-003-9 submitted to
FERC in December 2022. The new standard modifies CIP-003-8 to include
requirements addressing supply chain risk management for assets containing low
impact Bulk Electric System (BES) cyber systems. These modifications
responded to a NERC Board directive to study supply
chain risks associated with low impact BES Cyber Systems. Reliability Standard CIP-003-8 will be retired immediately prior to the
effective date of CIP-003-9. NERC appreciates FERC’s focus on reliability
matters and will continue to work toward assuring the reliability and security
of the North American bulk power system.
