This document defines procurement requirements for application software for substation HMIs, based on IEC 62443. It selects the requirements based on the security architecture and risk assessment from the ENCS member project. Where needed it further specifies and clarifies these requirements, and provides guidance on how they should be evaluated.