I have posted recently on the need to rewrite two NERC CIP requirements: CIP-007 Requirement R2 (patch management) and ...