FERC called for two changes to NERC’s draft CIP standard governing the security of communications between control centers.

FERC approved reliability standards for mitigating supply chain risks in industrial control system hardware, software and computing and networking services.

FERC ordered expanded reporting of cybersecurity incidents, saying attempts not currently reported could lead to bigger, more successful attacks.

FERC approved rules to prevent malware from infecting “low impact” computer systems through devices such as laptops and thumb drives.