NERC CIP-014 Standard Explained | Huntress

**Executive summary:** This interview explains NERC CIP-014, born from the 2013 Metcalf substation attack, and summarizes the six requirements (R1–R6) for identifying critical transmission substations and primary control centers, performing risk and TVA assessments, obtaining third‑party verifications, developing physical security plans, and conducting reviews; it estimates the standard now covers about 1,500 sites, highlights implementation challenges (funding timelines, site‑specific plans, law enforcement coordination), and lists recommended mitigations including perimeter security, access control, CCTV, intrusion detection, standoff distances, patrols, and other physical protections.