The new standards require utilities to assess vendor security controls, verify the authenticity of the source of software downloads and integrity of that software, and establish better controls over vendor remote access to the BES.