Project 2023-06 CIP-014 Risk Assessment Refinement

​​Related Files​

The formal comment and nomination period for the CIP-014 Risk Assessment Refinement Standard Authorization Request (SAR) concluded 8 p.m. Eastern, Thursday, August 24, 2023. The comments received can be accessed via the link below. 

The Standards Committee is expected to appoint members to the drafting team in September 2023. Nominees will be notified shortly after they have been appointed.

Once formed, the drafting team will review all responses received during the comment period and determine the next steps of the project.

Due to an increase in reports of physical attacks on electric substations, the Federal Energy Regulatory Commission (FERC) issued the December 2022 Order in Docket No. RD23-2-000 directing NERC to evaluate the effectiveness of the Physical Security Reliability Standard CIP-014-3 in mitigating the risks to the Bulk-Power System (BPS) associated with physical attacks. In the report filed in response to a FERC directive, NERC staff identified continuing inconsistency in registered entity CIP-014-3 risk assessments to most appropriately identify critical infrastructure. FERC directed NERC to evaluate whether the physical security protection requirements in NERC's Reliability Standards are adequate to address the risks associated with physical attacks on BPS Facilities, including the adequacy of the required risk assessment in CIP-014-3 Requirement R1. In the report, NERC found that CIP-014-3 required revision to assure adequate and consistent approach in evaluating instability as well as the identification of infrastructure critical to the operation of the BPS.

Standard(s) Affected CIP-014 

Purpose/Industry Need
As the intent of CIP-014-3 is to identify and physically protect those Transmission stations, Transmission substations, and their associated primary control centers that are critical to the reliable and secure operation of the BPS, registered entity approaches for the risk assessment must be reasonably consistent and substantiated with sufficient technically based rationale. As highlighted in the report, there continues to be confusion within industry as to how to adequately evaluate instability. Therefore, this project includes refinement of CIP-014 risk assessments to assure critical sites are identified and physically protected.

Subscribe to this project's observer mailing list 
Select "NERC Email Distribution Lists" from the "Service" drop-down menu and specify “Project 2023-06 CIP-014​ Observer List" in the Description Box.​




Consideration of Comments
Supporting Materials

Comment Period


Submit Comments​

07/26/23 - 08/24/23​

Comments Received​

Drafting Team Nominations

Supporting Materials

Unofficial Nomination Form (Word)

Nomination Period


Submit Nominations​

07/26/23 - 08/24/23