CISA’s ANCHOR-CI Framework Replaces CIPAC With Four Council Types
Summary
CISA’s ANCHOR-CI framework replaces CIPAC with four types of councils intended to improve public-private collaboration on critical-infrastructure risks, including cross-sector cyber threats and regional hazards.
Key points
- CISA published a Federal Register notice establishing ANCHOR-CI to replace the CIPAC collaboration framework.
- The framework creates sector, cross-sector, industry, and regional coordinating councils.
- Cross-sector councils are intended to address threats and dependencies affecting multiple critical-infrastructure sectors, including AI risks and supply-chain concerns.
- The article suggests an industry council could bring together OT vendors and infrastructure operators to address threats such as Volt Typhoon.
- CISA’s director would approve or remove members of the sector councils; the practical structure of regional councils remains unclear.
- The author says the framework’s effectiveness will depend on how CISA implements it, including whether it operates thoughtfully and transparently.
Article Details
- Event Type
- CISA published the ANCHOR-CI framework to replace the CIPAC model for government–industry collaboration on critical infrastructure.
- Impact
- ANCHOR-CI establishes four council types intended to broaden collaboration on cybersecurity and resilience issues, including threats spanning multiple sectors. The article says the framework is expected to guide government–industry collaboration for at least two years; its practical effects depend on how CISA implements it.