OT / ICS · 47 days ago
Vital OT cannot be treated as if upstream networks will always be there. The real gap is continuity: if business systems, identity services, or remote support disappear in a crisis, the control environment still has to run on its own or essential services stop.
CISA, ASD/ACSC, the FBI, and partners have issued CI Fortify guidance for critical infrastructure operators on isolating vital operational technology and enabling systems from all other networks and keeping them operating for an extended period. The guidance focuses on identifying critical systems, mapping dependencies, and creating separation points so disruption or geopolitical crisis does not cascade into service loss.
3 sources covering this story
CISA unveils a six-step blueprint for isolating critical infrastructure during cyberattacks
A new guide from CISA and allied cybersecurity agencies says organizations should build dedicated isolation points into operational technology to contain attacks and continue delivering essential services.
CISA shares advice on isolating vital systems during cyberattacks
The U.S. and Australian governments have released new guidance urging critical infrastructure organizations to prepare to isolate vital operational technology systems in the event of a cyberattack or other major disruptions.
CI Fortify – Advice for isolating vital systems | CISA
CI Fortify – Advice for isolating vital systems (PDF)CISA and the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC), in collaboration with the Federal Bureau of Investigation and international partners, released joint guidance CI Fortify – Advice for…
Part of the PlainSec briefing for 2026-07-30