Ampyx Cyber Blog

The Intersection of Regulation & Resilience

CIP-014-4 Approved: The New Physical Security Risk Assessment and the 2028 Clock
Policy Pulse Patrick Miller Policy Pulse Patrick Miller

CIP-014-4 Approved: The New Physical Security Risk Assessment and the 2028 Clock

FERC approved Reliability Standard CIP-014-4 on September 10, 2026 in Docket No. RD26-9-000, and the version number understates the change. CIP-014-3 had six requirements. CIP-014-4 has ten, three of them new. The risk assessment now needs a documented methodology, mandatory dynamic simulations, and a neighboring substation in the model. All of it has to be finished by October 1, 2028.

Read More