NATF

Updates

May 26, 2026

The annual Criteria and Questionnaire revision process has been recently completed with NATF approval of the final documents on May 19, 2026. The NATF Supply Chain Security Criteria and Energy Sector Supply Chain Risk Questionnaire version 7.0 documents have been posted for industry use on the Supply Chain Industry Coordination page of the NATF public website. The Version History link on that site also includes prior versions and redlines.

Revisions to the NATF Criteria and Questionnaire include edits for clarity, completeness, and to update framework mappings for NIST SP 800-171r3 and NIST SP 800-53r5.2.0. A supplier response column has been added to the Criteria, and multiple edits have been made to the guidance text in the Questionnaire to improve coverage.

These updates were reviewed and accepted by the ERO Enterprise to ensure its continued endorsement of the two NATF CIP-013 Implementation Guidance documents: NATF CIP-013 Implementation Guidance: Using Independent Assessments of Vendors and NATF CIP-013 Implementation Guidance: Supply Chain Risk Management Plans.

Program Downloads