Representative End User Clients
Representative Automation Clients
Representative Software Clients
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), the Australian Signals Directorate (ASD), the United Kingdom’s National Cyber Security Centre (NCSC-UK), and the Canadian Centre for Cyber Security (CCCS) have jointly published CI Fortify – Advice for Isolating Vital Systems. Led by ASD, the joint guidance helps critical infrastructure operators protect essential services from escalating cyber threats and ensure continuity of operations during cyber incidents or geopolitical crises.
State-sponsored cyber actors target critical infrastructure for several nefarious purposes, such as espionage and service disruption, often linked to broader geopolitical conflicts. During crises or conflicts, critical infrastructure operators and network defenders may isolate essential operational technology (OT) systems as an emergency measure to prevent adversaries from executing cyberattacks, contain ongoing threats, and facilitate the restoration of compromised systems.
In the event of a significant nationwide cyber incident that disrupts supply chains or critical infrastructure, organizations need to be prepared to sustain operations independently for extended periods. Essential steps for isolating vital systems include identifying assets, mapping their connections, and establishing separation points to ensure continued operations during such incidents.
The guidance covers:
Identifying and mapping vital systems and connections.
Building effective separation points.
Developing graduated isolation plans and conducting regular testing.
Real-world examples of resilience during ransomware attacks.
For more information, visit CISA’s CI Fortify webpage.
Learn more about industrial cybersecurity challenges and solutions.