| The Cybersecurity and Infrastructure Security Agency (CISA) and the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC), in collaboration with the Federal Bureau of Investigation (FBI) and international partners, published Joint Guidance CI Fortify – Advice for isolating vital systems. This guidance, aligned with CISA’s CI Fortify initiative, is designed to help critical infrastructure (CI) owners and operators prepare to isolate their operational technology (OT) and enabling systems to maintain essential operations during a significant cybersecurity incident or crisis. |
| State-sponsored cyber threat actors are increasingly targeting critical infrastructure for pre-positioning. By physically isolating vital OT and enabling systems, CI operators and defenders can disrupt adversaries, contain attacks in progress, and rebuild compromised systems. |
| This Joint Guidance provides practical steps for isolating vital systems, such as identifying and mapping critical assets and connections, building effective separation points, and developing graduated isolation plans with regular testing. The guidance also outlines temporary measures to support network isolation for organizations unable to physically isolate, while emphasizing that physical isolation remains the most risk-effective solution. |
| Read the isolation guidance to learn more. Visit the CI Fortify webpage for additional resources on CI security and resilience. |