What does NERC CIP-014 require substation owners to do?

Identify critical transmission stations, assess the physical threats each faces, and implement a protection plan proportional to grid impact, with an unaffiliated third party verifying the risk assessment. It makes physical security an auditable executive decision.

What Does NERC CIP-014 Require of Substation Owners?

It requires transmission owners to find their critical stations, study the physical threats each one faces, and put in a protection plan that matches how badly the grid would feel the loss. An outside party has to verify the risk assessment. It is a documented decision an executive signs, not a product you buy.

Substations & Transmission

What the standard actually asks for

CIP-014 walks an owner through identifying which stations matter to the grid, judging the credible physical threats against them, and protecting them in proportion to that impact. An unaffiliated third party then checks the risk work. The whole record is auditable, which is why the obligation lands on an executive's desk rather than a purchasing form.

The gap is usually the enclosure, not the fence

Meeting the intent often means protecting the equipment itself, not just the site line. Control houses and critical equipment enclosures built to a real threat basis close the vulnerability an assessment flags. A perimeter on its own rarely does.

For the equipment envelope, that means enclosures built to a real threat basis.

Request a Preservation 2 assessment