Under NERC CIP-013, entities must work with suppliers, contractors, and OEMs to establish and enforce cybersecurity and supply chain risk management requirements for the procurement and handling of BES Cyber Systems and their associated EACMS and PACS. These...