• CISA, ASD’s ACSC, and Partners Release Joint Guidance on Isolating Vital Operational Technology and Enabling Systems During Crisis

    From CISA@cisa@messages.cisa.gov to cisa@toolazy.synchro.net on Tue Jul 28 15:17:56 2026
    --===============4414963644493143216==
    Content-Type: multipart/alternative; boundary="===============6364860375539367997=="
    MIME-Version: 1.0

    --===============6364860375539367997==
    Content-Type: text/plain; charset="utf-8"
    MIME-Version: 1.0
    Content-Transfer-Encoding: quoted-printable

    Cybersecurity and Infrastructure Security Agency (CISA)

    You are subscribed to Cybersecurity Advisories for Cybersecurity and Infras= tructure Security Agency. This information has recently been updated and is=
    now available.

    CISA, ASD=E2=80=99s ACSC, and Partners Release Joint Guidance on Isolating = Vital Operational Technology and Enabling Systems During Crisis [ https://w= ww.cisa.gov/resources-tools/resources/ci-fortify-advice-isolating-vital-sys= tems ] 07/28/2026 11:00 AM EST=20

    Today, the Cybersecurity and Infrastructure Security Agency (CISA) and the = Australian Signals Directorate=E2=80=99s Australian Cyber Security Centre (= ASD=E2=80=99s ACSC), in collaboration with the Federal Bureau of Investigat= ion (FBI) and international partners, published joint guidance "CI Fortify = =E2=80=93 Advice for isolating vital systems" [ https://www.cisa.gov/resour= ces-tools/resources/ci-fortify-advice-isolating-vital-systems ]. This guida= nce, aligned with CISA=E2=80=99s CI Fortify [ https://www.cisa.gov/topics/i= ndustrial-control-systems/ci-fortify ] initiative, is designed to help crit= ical infrastructure (CI) owners and operators prepare to isolate their oper= ational technology (OT) and enabling systems to maintain essential operatio=
    ns during a significant cybersecurity incident or crisis.

    State-sponsored cyber threat actors are increasingly targeting critical inf= rastructure for pre-positioning. By physically isolating vital OT and enabl= ing systems, CI operators and defenders can disrupt adversaries, contain at= tacks in progress, and rebuild compromised systems.

    This joint guidance provides practical steps for isolating vital systems, s= uch as identifying and mapping critical assets [ https://www.cisa.gov/resou= rces-tools/resources/foundations-ot-cybersecurity-asset-inventory-guidance-= owners-and-operators ] and connections, building effective separation point=
    s, and developing graduated isolation plans with regular testing. The guida= nce also outlines temporary measures to support network isolation for organ= izations unable to physically isolate, while emphasizing that physical isol= ation remains the most risk-effective solution.

    Read the isolation guidance [ https://www.cisa.gov/resources-tools/resource= s/ci-fortify-advice-isolating-vital-systems ] to learn more. Visit the CI F= ortify webpage [ https://www.cisa.gov/topics/industrial-control-systems/ci-= fortify ] for additional resources on CI security and resilience.

    Please share your thoughts with us through this anonymous survey [ https://= cisasurvey.gov1.qualtrics.com/jfe/form/SV_9n4TtB8uttUPaM6?Source=3DGovDeliv= erycifortifyisolatingvitalsystems ]. We appreciate your feedback.

    This product is provided subject to this Notification [ https://www.cisa.go= v/notification ] and this Privacy & Use [ https://www.cisa.gov/privacy-poli=
    cy ] policy.

    body { font-size: 1em; font-family: Arial, Verdana, sans-serif; font-weight=
    : normal; font-style: normal; color: #333333; }=20

    Having trouble viewing this message?=C2=A0View it as a webpage [ https://co= ntent.govdelivery.com/accounts/USDHSCISA/bulletins/4227ca8 ].=C2=A0 [ https= ://content.govdelivery.com/accounts/USDHS/bulletins/292141e ]

    You are subscribed to updates from the Cybersecurity and Infrastructure Sec= urity Agency [ https://www.cisa.gov ] (CISA)
    Manage Subscriptions [ https://public.govdelivery.com/accounts/USDHSCISA/su= bscriber/edit?preferences=3Dtrue#tab1 ]=C2=A0=C2=A0|=C2=A0=C2=A0Privacy Pol= icy [ https://www.cisa.gov/privacy-policy ]=C2=A0=C2=A0|=C2=A0 Help [ https= ://subscriberhelp.granicus.com/s/article/Subscriber-Help-Center ] [ https:/= /insights.govdelivery.com/Communications/Subscriber_Help_Center ]

    Connect with CISA:=20
    Facebook [ https://www.facebook.com/CISA ]=C2=A0 |=C2=A0 Twitter [ https://= twitter.com/CISAgov ]=C2=A0 |=C2=A0 Instagram [ https://Instagram.com/cisag=
    ov ]=C2=A0 |=C2=A0 LinkedIn [ https://www.linkedin.com/company/cybersecurit= y-and-infrastructure-security-agency ]=C2=A0 |=C2=A0=C2=A0 YouTube [ https:= //www.youtube.com/channel/UCxyq9roe-npgzrVwbpoAy0A ]

    ________________________________________________________________________

    This email was sent to cisa@toolazy.synchro.net using Granicus Communicatio=
    ns Cloud, on behalf of: Cybersecurity and Infrastructure Security Agency = =C2=B7 707 17th St, Suite 4000 =C2=B7 Denver, CO 80202 GovDelivery logo [ h= ttps://granicus.com/solution/digital-communication-engagement/ ]=20
    body .abe-column-block { min-height: 5px; } table.gd_combo_table img {margi= n-left:10px; margin-right:10px;} table.gd_combo_table div.govd_image_displa=
    y img, table.gd_combo_table td.gd_combo_image_cell img {margin-left:0px; ma= rgin-right:0px;}

    --===============6364860375539367997==
    Content-Type: text/html; charset="utf-8"
    MIME-Version: 1.0
    Content-Transfer-Encoding: quoted-printable

    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
    <html xmlns=3D"http://www.w3.org/1999/xhtml" xml:lang=3D"en" lang=3D"en"> <head>
    <title> CISA, ASD=E2=80=99s ACSC, and Partners Release Joint Guidance on=
    Isolating Vital Operational Technology and Enabling Systems During Crisis </title>


    </head>
    <body style=3D"">

    <table width=3D"700" border=3D"0" cellspacing=3D"0" cellpadding=3D"0"=
    align=3D"center">
    <tr>
    <td>

    <!--[if (gte mso 9)|(IE)]>
    <table style=3D"display:none"><tr><td><a name=3D"gd_top" id=3D"gd_top"></= a></td></tr></table>
    <![endif]-->
    <a name=3D"gd_top" id=3D"gd_top"></a>

    =20



    <p><img src=3D"https://content.govdelivery.com/attachments/fancy_images/U= SDHSCISA/2020/06/3486054/05152023-gov-delivery-banner-copy_original.png" al= t=3D"Cybersecurity and Infrastructure Security Agency (CISA)" title=3D"" wi= dth=3D"600" height=3D"100"></p>
    <p>You are subscribed to Cybersecurity Advisories for Cybersecurity and I= nfrastructure Security Agency. This information has recently been updated a=
    nd is now available.</p>
    <div class=3D"rss_item" style=3D"margin-bottom: 2em;">
    <div class=3D"rss_title" style=3D"font-weight: bold; font-size: 120%; margi=
    n: 0 0 0.3em; padding: 0;"><a href=3D"https://www.cisa.gov/resources-tools/= resources/ci-fortify-advice-isolating-vital-systems" target=3D"_blank" titl= e=3D"CISA, ASD=E2=80=99s ACSC, and Partners Release Joint Guidance on Isola= ting Vital Operational Technology and Enabling Systems During Crisis" rel= =3D"noopener">CISA, ASD=E2=80=99s ACSC, and Partners Release Joint Guidance=
    on Isolating Vital Operational Technology and Enabling Systems During Cris= is</a></div>
    <div class=3D"rss_pub_date" style=3D"font-size: 90%; font-style: italic; co= lor: #666666; margin: 0 0 0.3em; padding: 0;">07/28/2026 11:00 AM EST</div> <div class=3D"l-page-section l-page-section--rich-text csaf-imported">
    <div class=3D"l-constrain">
    <div class=3D"l-page-section__content">
    <p>Today, the Cybersecurity and Infrastructure Security Agency (CISA) and t=
    he Australian Signals Directorate=E2=80=99s Australian Cyber Security Centr=
    e (ASD=E2=80=99s ACSC), in collaboration with the Federal Bureau of Investi= gation (FBI) and international partners, published joint guidance <a href= =3D"https://www.cisa.gov/resources-tools/resources/ci-fortify-advice-isolat= ing-vital-systems" target=3D"_blank" title=3D"CI Fortify =E2=80=93 Advice f=
    or isolating vital systems" rel=3D"noopener"><em>CI Fortify =E2=80=93 Advic=
    e for isolating vital systems</em></a>. This guidance, aligned with CISA=E2= =80=99s <a href=3D"https://www.cisa.gov/topics/industrial-control-systems/c= i-fortify" target=3D"_blank" title=3D"CI Fortify" rel=3D"noopener">CI Forti= fy</a> initiative, is designed to help critical infrastructure (CI) owners = and operators prepare to isolate their operational technology (OT) and enab= ling systems to maintain essential operations during a significant cybersec= urity incident or crisis.</p>
    <p>State-sponsored cyber threat actors are increasingly targeting critical = infrastructure for pre-positioning. By physically isolating vital OT and en= abling systems, CI operators and defenders can disrupt adversaries, contain=
    attacks in progress, and rebuild compromised systems.</p>
    <p>This joint guidance provides practical steps for isolating vital systems=
    , such as <a href=3D"https://www.cisa.gov/resources-tools/resources/foundat= ions-ot-cybersecurity-asset-inventory-guidance-owners-and-operators" target= =3D"_blank" title=3D"identifying and mapping critical assets" rel=3D"noopen= er">identifying and mapping critical assets</a> and connections, building e= ffective separation points, and developing graduated isolation plans with r= egular testing. The guidance also outlines temporary measures to support ne= twork isolation for organizations unable to physically isolate, while empha= sizing that physical isolation remains the most risk-effective solution.</p=

    <p>Read the <a href=3D"https://www.cisa.gov/resources-tools/resources/ci-fo= rtify-advice-isolating-vital-systems" target=3D"_blank" title=3D"isolation = guidance" rel=3D"noopener">isolation guidance</a> to learn more. Visit the =
    <a href=3D"https://www.cisa.gov/topics/industrial-control-systems/ci-fortif=
    y" target=3D"_blank" title=3D"CI Fortify webpage" rel=3D"noopener">CI Forti=
    fy webpage</a> for additional resources on CI security and resilience.</p> <p>Please share your thoughts with us through this <a href=3D"https://cisas= urvey.gov1.qualtrics.com/jfe/form/SV_9n4TtB8uttUPaM6?Source=3DGovDeliveryci= fortifyisolatingvitalsystems" target=3D"_blank" title=3D"anonymous survey" = rel=3D"noopener">anonymous survey</a>. We appreciate your feedback.</p>
    <p>This product is provided subject to this <a href=3D"https://www.cisa.gov= /notification" target=3D"_blank" title=3D"Notification" rel=3D"noopener">No= tification</a> and this <a href=3D"https://www.cisa.gov/privacy-policy" tar= get=3D"_blank" title=3D"Privacy &amp; Use" rel=3D"noopener">Privacy &amp; U= se</a> policy.</p>
    </div>
    </div>
    </div>
    </div>
    <style>body {
    font-size: 1em; font-family: Arial, Verdana, sans-serif; font-weight: norma=
    l; font-style: normal; color: #333333;
    }
    </style>
    =20


    <div id=3D"mail_footer">
    <p style=3D"text-align: center;"><span style=3D"font-size: 10.0pt; colo=
    r: #757575;">Having trouble viewing this message?=C2=A0</span><a href=3D"ht= tps://content.govdelivery.com/accounts/USDHSCISA/bulletins/4227ca8" target= =3D"_blank" rel=3D"noopener">View it as a webpage</a>.=C2=A0<a href=3D"http= s://content.govdelivery.com/accounts/USDHS/bulletins/292141e" target=3D"_bl= ank" rel=3D"noopener"></a><span style=3D"font-size: 10.0pt; color: #757575;= "></span></p>
    <p style=3D"text-align: center;"><span style=3D"font-size: 10.0pt; color: #= 757575;">You are subscribed to updates from the </span><a href=3D"https://w= ww.cisa.gov"><span style=3D"font-size: 10.0pt;">Cybersecurity and Infrastru= cture Security Agency</span></a><span style=3D"font-size: 10.0pt; color: #7= 57575;"> (CISA)<br></span><a href=3D"https://public.govdelivery.com/account= s/USDHSCISA/subscriber/edit?preferences=3Dtrue#tab1" target=3D"_blank" rel= =3D"noopener"><span style=3D"font-size: 10.0pt; color: #00568c;">Manage Sub= scriptions</span></a>=C2=A0=C2=A0<span style=3D"font-size: 10.0pt; color: #= 757575;">|=C2=A0=C2=A0</span><a href=3D"https://www.cisa.gov/privacy-policy=
    " target=3D"_blank" rel=3D"noopener"><span style=3D"font-size: 10.0pt; colo=
    r: #00568c;">Privacy Policy</span></a><span style=3D"font-size: 10.0pt; col= or: #757575;">=C2=A0=C2=A0|=C2=A0 <a href=3D"https://subscriberhelp.granicu= s.com/s/article/Subscriber-Help-Center" target=3D"_blank" rel=3D"noopener">= Help</a><a href=3D"https://insights.govdelivery.com/Communications/Subscrib= er_Help_Center" target=3D"_blank" rel=3D"noopener"></a></span><span style= =3D"font-size: 10.0pt; color: #757575;"></span></p>
    <p style=3D"text-align: center;"><span style=3D"font-size: 10.0pt; color: #= 757575;">Connect with CISA: <br></span><a href=3D"https://www.facebook.com/= CISA" target=3D"_blank" rel=3D"noopener"><span style=3D"font-size: 10.0pt; = color: #00568c;">Facebook</span></a><span style=3D"font-size: 10.0pt; color=
    : #757575;">=C2=A0 |=C2=A0 </span><a href=3D"https://twitter.com/CISAgov" t= arget=3D"_blank" rel=3D"noopener"><span style=3D"font-size: 10.0pt; color: = #00568c;">Twitter</span></a><span style=3D"font-size: 10.0pt; color: #75757= 5;">=C2=A0 |=C2=A0 </span><a href=3D"https://Instagram.com/cisagov" target= =3D"_blank" rel=3D"noopener"><span style=3D"font-size: 10.0pt; color: #0056= 8c;">Instagram</span></a><span style=3D"font-size: 10.0pt; color: #757575;"= >=C2=A0 |=C2=A0 </span><a href=3D"https://www.linkedin.com/company/cybersec= urity-and-infrastructure-security-agency" target=3D"_blank" rel=3D"noopener= "><span style=3D"font-size: 10.0pt; color: #00568c;">LinkedIn</span></a><sp=
    an style=3D"font-size: 10.0pt; color: #757575;">=C2=A0 |=C2=A0=C2=A0 </span= ><a href=3D"https://www.youtube.com/channel/UCxyq9roe-npgzrVwbpoAy0A" targe= t=3D"_self"><span style=3D"font-size: 10.0pt; color: #00568c;">YouTube</spa= n></a><span style=3D"font-size: 10.0pt; color: #757575;"></span></p>

    </div>
    <div id=3D"tagline">
    <hr>
    <table style=3D"width: 100%;" border=3D"0" cellspacing=3D"0" cellpadding=3D=

    <tbody>

    <td style=3D"color: #757575; font-size: 10px; font-family: Arial;" width=3D= "89%">This email was sent to cisa@toolazy.synchro.net using Granicus Commun= ications Cloud, on behalf of: Cybersecurity and Infrastructure Security Age= ncy =C2=B7 707 17th St, Suite 4000 =C2=B7 Denver, CO 80202</td>
    <td align=3D"right" width=3D"11%"><a href=3D"https://granicus.com/solution/= digital-communication-engagement/" target=3D"_blank" rel=3D"noopener"><img = src=3D"https://content.govdelivery.com/images/govd-logo-dark.png" border=3D= "0" alt=3D"GovDelivery logo" width=3D"115"></a></td>
    </tr>
    </tbody>
    </table>
    <style type=3D"text/css">body .abe-column-block { min-height: 5px; } table.= gd_combo_table img {margin-left:10px; margin-right:10px;} table.gd_combo_ta= ble div.govd_image_display img, table.gd_combo_table td.gd_combo_image_cell=
    img {margin-left:0px; margin-right:0px;}</style>

    </div>
    </td>
    </tr>
    </table>

    <img alt=3D"" src=3D"https://links-2.govdelivery.com/CI0/0101019fa94dd071-4= aee3907-55e1-4dd3-810e-b7d3ce4394b8-000000/ZpvUjqZ4-I126mxbVQIKNHvzRVbr9dNX= hWwD1h8IfQ8=3D452" style=3D"display: none; width: 1px; height: 1px;">
    </body>
    </html>

    --===============6364860375539367997==--

    --===============4414963644493143216==--