IEEE 1686 SupplyChain-Documentation-Procurement-ComplianceTable-Physical: IEEE 1686 Section 6 IED Security Documentation + Supply Chain + Procurement Specification + Appendix A Compliance Table + Physical and Tamper

Section 6 establishes IED Security Documentation requirements + Appendix A Compliance Table format. Per public IEEE 1686 abstract + vendor capability statements (full IEEE text NOT reproduced): Section 6 IED Security Documentation - vendor-provided documentation covering: IED security capabilities + configuration + hardening guide + secure update procedure + user authentication setup + RBAC role definitions + default credential change procedure + logging configuration + event types + retention + backup + recovery + lifecycle support + EOL planning + IEEE 1686 Compliance Table (CT) per Appendix A. Compliance Table by Vendor: standardised format where vendor declares conformance to each Section 5 capability + identifies supported/partial/not supported + version compatibility + roadmap; reviewed at procurement + post-installation + periodic re-review. Procurement specification: utility procurement language incorporating IEEE 1686 Section 5 capability requirements + IEC 62351 protocol requirements + IEC 62443 component requirements + NERC CIP procurement guidance (Lazada + NIST Cybersecurity Risk Management Conformity Assessment Program + Carnegie Mellon SCRM) + vendor cybersecurity questionnaire + vendor security risk assessment; multi-year roadmap commitments + lifecycle support + EOL planning + SBOM disclosure where available. Supply chain risk management for critical components: vendor cybersecurity due diligence + ISO 27001 / IEC 62443-4-1 / IEC 62443-2-4 supplier assessment + Foreign Ownership Control or Influence (FOCI) per national security rules + sanctioned vendor screening + UFLPA + responsible sourcing; tamper-evident shipping + secure delivery + receiving inspection + provenance tracking; substation physical access controls (NERC CIP-006 Physical Security of BES Cyber Systems) + tamper detection per Compliance Table + intrusion detection + CCTV. Coordinates with NERC CIP-013 (Supply Chain Risk Management) + NIST SP 800-161 + NIST IR 8276 (Key Practices in Cyber Supply Chain Risk Management) + EO 14017 (America's Supply Chains) + NERC CIP-006 (Physical Security) + IEC 62443-2-4 + IEC 62443-4-1 + SBOM + EU NIS2 + UK Telecoms Security Act.