CISA Urges Critical Infrastructure Operators to Prepare Isolation and Recovery Plans
Summary
CISA launched CI Fortify, urging U.S. critical infrastructure operators to prepare for prolonged isolation from external networks and strengthen recovery through system documentation, backups, restoration rehearsals and manual-operation plans.
Key points
- CISA warns that nation-state actors have embedded themselves in critical systems and telecommunications networks, potentially positioning them to disrupt operational technology during a wider conflict.
- CI Fortify aims to help essential service providers maintain operations during active cyberattacks.
- Operators are urged to sever connections to outside networks and business systems when needed to prevent attacks from spreading to operational technology.
- CISA recommends documenting systems, maintaining current backups, rehearsing restoration and preparing to switch to manual operations.
- Xage Security CEO Duncan Greatwood cautioned that isolation alone may be insufficient if threats can move through trusted connections, third parties or compromised credentials.
Article Details
- Event Type
- CISA launched CI Fortify, an initiative providing guidance to help critical infrastructure operators prepare for cyberattacks and geopolitical conflict.
- Impact
- The initiative emphasizes isolation from outside networks and business systems, maintaining essential services during prolonged disconnection, and recovering compromised systems through documentation, backups, restoration exercises, or manual operations. It addresses the risk of hostile actors maintaining footholds in operational technology and telecommunications networks.
People
Duncan GreatwoodXage Security CEO who commented on the guidance, emphasizing the importance of isolation, segmentation, and maintaining operations in a degraded state.Nick AndersenCISA Acting Director who called on critical infrastructure operators to review and implement the guidance and work with the agency to strengthen defenses.
Industries
Critical infrastructureCybersecurity and Infrastructure Security Agency (CISA) has issued new guidance warning that US critical infrastructure operators face relentless intrusion attempts from nation-state actors whose ambitions go wellNational defenseCI Fortify, an initiative designed to ensure that essential service providers such as public health, national defense, and economic systems can continue operating even during an active cyberattack.public healthagency launched CI Fortify, an initiative designed to ensure that essential service providers such as public health, national defense, and economic systems can continue operating even during an active cyberattack.