Related Files
Status
The formal comment period, additional ballots, and non-binding poll for Project 2023-06 CIP-014 Risk Assessment Refinement concluded at 8 p.m. Eastern, Wednesday, November 6, 2024 for the following standard and implementation plan:
• CIP-014-4 – Physical Security
The drafting team will review all responses received during the comment period and determine the next steps of the project.1
Background
Due to an increase in reports of physical attacks on electric substations, the Federal Energy Regulatory Commission (FERC) issued the December 2022 Order in Docket No. RD23-2-000 directing NERC to evaluate the effectiveness of the Physical Security Reliability Standard CIP-014-3 in mitigating the risks to the Bulk-Power System (BPS) associated with physical attacks. In the report filed in response to a FERC directive, NERC staff identified continuing inconsistency in registered entity CIP-014-3 risk assessments to most appropriately identify critical infrastructure. FERC directed NERC to evaluate whether the physical security protection requirements in NERC's Reliability Standards are adequate to address the risks associated with physical attacks on BPS Facilities, including the adequacy of the required risk assessment in CIP-014-3 Requirement R1. In the report, NERC found that CIP-014-3 required revision to assure adequate and consistent approach in evaluating instability as well as the identification of infrastructure critical to the operation of the BPS.
This project is identified as a NERC Board of Trustees priority work plan item and expected to be submitted to the board by the end of 2024.
Standard(s) Affected – CIP-014
Purpose/Industry Need
As the intent of CIP-014-3 is to identify and physically protect those Transmission stations, Transmission substations, and their associated primary control centers that are critical to the reliable and secure operation of the BPS, registered entity approaches for the risk assessment must be reasonably consistent and substantiated with sufficient technically based rationale. As highlighted in the report, there continues to be confusion within industry as to how to adequately evaluate instability. Therefore, this project includes refinement of CIP-014 risk assessments to assure critical sites are identified and physically protected.
Subscribe to this project's observer mailing list
Select "NERC Email Distribution Lists" from the "Service" drop-down menu and specify “Project 2023-06 CIP-014 Observer List" in the Description Box.
