CISA and ACSC urge critical infrastructure to isolate OT systems

The US Cybersecurity and Infrastructure Security Agency (CISA) and Australia's Cyber Security Centre (ACSC) have released joint guidance titled 'CI Fortify' aimed at helping critical infrastructure (CI) organizations isolate vital operational technology (OT) systems for improved cyber resilience.

The guidance emphasizes the need for CI operators to identify, classify, and document the systems crucial for operations, establish physical isolation points, and create plans for maintaining business continuity during potential crises. Additionally, organizations are advised to monitor their isolation strategies and assess associated risks such as reduced visibility and the threat of malware through removable media. The document supports OT owners and cybersecurity teams in enhancing preparedness and response to cyber threats.