The Model
NATF Supplier Cyber Security Assessment Model Overview
Supplier Cyber Security Assessment Model
NATF Cyber Security Criteria for Suppliers
Energy Sector Supply Chain Risk Questionnaire (Unformatted, Formatted)
Resources
EEI Model Procurement Contract Language Addressing Cybersecurity Supply Chain Risk V2 (external)
NATF CIP-013-1 Implementation Guidance
NATF Guidance for CIP-010-3 Software Integrity
Understanding Third-Party Assessments
Presentations
Industry Organizations Aligned Approach for Supply Chain Cyber Security Webinar 02242020 Slides
The Energy Sector Supply Chain Risk Questionnaire Webinar Slides 05192020
Large Entity Use Case Webinar Slides 06022020
NERC Supply Chain Working Group (SCWG) Security Guidelines
- Cyber Security Risk Management Lifecycle
- Provenance
- Risk Considerations for Open Source Software
- Risks Related to Cloud Service Providers
- Secure Equipment Delivery
- Vendor Incident Response
- Vendor Risk Management Lifecycle
Asset to Vendor Network (A2V) Supplier & Product Assessment Database / Compliance Technology