CISA Unveils CI Fortify to Help Secure Critical Infrastructure During Conflicts

CISA wants critical infrastructure to operate ‘weeks to months’ in isolation during conflict

The Cybersecurity and Infrastructure Security Agency is urging critical infrastructure owners and operators to plan for delivering essential services under emergency conditions – potentially for months at a time. The federal government’s top cybersecurity agency warned that state-sponsored hackers, particularly two Chinese groups known as Salt Typhoon and Volt Typhoon, continue to threaten critical sectors like electricity, water, and internet. …

CISA unveils CI Fortify to help secure critical infrastructure during conflicts

The Cybersecurity and Infrastructure Security Agency announced the release of its CI Fortify project on Tuesday, aiming to help critical infrastructure owners and operators defend themselves against hackers and maintain continuity during a geopolitical conflict. “For planning purposes, operators should assume that in a conflict scenario third-party connections — such as telecommunications, internet, vendors, service providers, and upstream depen…

CISA urges critical infrastructure firms to ‘fortify’ now before it’s too late

As concerns mount about potential cyber sabotage by the Chinese government, the U.S. is warning infrastructure operators to practice maintaining services in a degraded state.

CI Fortify Targets Critical Infrastructure Threats

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has launched a new initiative called “CI Fortify” aimed at helping critical infrastructure operators prepare for disruptive cyberattacks linked to geopolitical conflicts. The initiative comes amid growing concerns over nation-state cyber threats targeting operational technology (OT) systems that support essential services across the United States. The CI Fortify initiative focuses …

CISA's CI Fortify rewrites the disconnection playbook for critical infrastructure

Editor’s Note: CISA’s May 5 release of CI Fortify reframes critical infrastructure resilience around an assumption many operators are not ready to plan against: that during a geopolitical conflict, third-party vendors, telecom links, business networks, and cloud platforms will be unreliable, and adversaries will already be inside. The agency now wants water utilities, power operators, pipelines, and the rest of the nation’s 16 critical infrastru…

New CISA initiative aims for critical infrastructure to operate offline during cyberattacks

The initiative, named CI Fortify, focuses on isolation and recovery efforts that would see critical infrastructure organizations proactively disconnect from third-party dependencies and find ways to operate without reliable telecommunications and internet.