US, Australia Release OT Isolation Guidance for Critical Infrastructure

The US cybersecurity agency CISA and Australia’s ACSC have jointly released guidance, ‘CI Fortify,’ to help critical infrastructure organizations isolate vital Operational Technology (OT) systems and supporting networks. This guidance focuses on enabling organizations to operate these systems in isolation for extended periods, bolstering cyber resilience and minimizing disruption in case of cyberattacks or other crises. The document highlights potential operational challenges associated with isolation, such as reduced patching and external visibility, and stresses the need for careful planning and monitoring.