NERC CIP
CIP-013: Supply Chain Risk Management – NERC CIP

NERC CIP CIP-013 R1.2.4: CIP-013-2 R1.2.4: Vendor disclosure of known vulnerabilities

Procurement processes that address disclosure by vendors of known vulnerabilities related to the products or services provided.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in CIP-013: Supply Chain Risk Management – NERC CIP

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.