FERC approved NERC Reliability Standard CIP-014-4 (Physical Security), its implementation plan, violation risk factors and violation severity levels. The revised standard strengthens the physical-security framework for critical transmission facilities.

Key changes include coverage language for jointly owned facilities, review and update of applicable facility lists at least every 36 calendar months, identification of proximate BES transmission stations and substations within 1,500 feet (457 meters), a documented risk-assessment methodology with defined criteria and simulation cases, and a single 36-month risk-assessment cycle.

CIP-014-4 becomes effective October 1, 2028, with CIP-014-3 retiring immediately before that date.

Impact

Impact assessment: High.

Key reasons: FERC approval makes CIP-014-4 a mandatory Reliability Standard for applicable entities and materially strengthens risk-assessment methodology, timing and verification expectations.

Who is affected?

Transmission owners with facilities meeting the standard's applicability criteria, jointly owned facilities and security/reliability teams supporting critical transmission assets.

Conclusion:

applicable entities should map facilities, ownership arrangements, proximate stations, technical study methods and third-party review processes well before October 1, 2028.