CIP-014-4 introduces a more structured and technically rigorous framework for evaluating physical security risk at critical transmission facilities. This article explains what changed and how utilities can use the standard to support broader risk-informed security and resilience decisions.