Ampyx Cyber Blog
The Intersection of Regulation & Resilience
CIP-014-4 Approved: The New Physical Security Risk Assessment and the 2028 Clock
FERC approved Reliability Standard CIP-014-4 on September 10, 2026 in Docket No. RD26-9-000, and the version number understates the change. CIP-014-3 had six requirements. CIP-014-4 has ten, three of them new. The risk assessment now needs a documented methodology, mandatory dynamic simulations, and a neighboring substation in the model. All of it has to be finished by October 1, 2028.