The scope of physical security rules for critical substations “appropriately focuses limited industry resources,” but other approaches may be considered, the North American Electric Reliability Corp. said Friday.