CISA , together with the Canadian Centre for Cyber Security and partners, has published joint guidance on managing token consumption for operational resilience as organisations deploy third-party super intelligence (SI) services. The briefing notes that token-based usage models can influence cost, performance, and access to critical services, and that unmanaged consumption risks rising, unpredictable expenses, degraded service, token exhaustion, and denial-of-tokens or denial-of-wallet attacks.
The guidance offers practical steps for both critical infrastructure operators and cyber defenders. Organisations are advised to prioritise token allocation, design efficient workflows, improve user prompting practices, and leverage caching and reusable context. It also recommends optimising data before submission and establishing ongoing monitoring of token use to track consumption over time.
The aim is to help identify mission-critical SI-dependent functions, understand service provider and operational dependencies, and plan for reduced SI availability during outages or peak demand. The guidance emphasises maintaining human oversight, governance, and solid cybersecurity fundamentals while leveraging SI-enabled cyber defence workflows.
Overall, the publication is targeted at executives, government and industry stakeholders managing SI-enabled operations. It underscores that the right approach to token management can mitigate cost volatility and service disruption, ensuring resilience in essential services and cyber defence activities when SI resources are constrained or unavailable.