Key recommendations: 1. Address cyber and supply chain security risk for inverter-based resources already in the primary legislation as is done for the ICT supply chain of communication networks 2. Introduce a new Annex IIa for key ICT assets for inverter-based resources.