CISA pushes critical infrastructure operators to prepare to work in isolation

CISA has launched CI Fortify, a national initiative urging critical infrastructure operators to prepare for operating in isolation from the internet and third-party dependencies during cyberattacks. The program emphasizes controlled disconnection, local operation, and rapid recovery rather than traditional air-gapping. Experts note the initiative repackages familiar business continuity and disaster recovery concepts, but highlight two major barriers: most operators lack comprehensive visibility into their OT dependencies, and building redundant resilient systems is costly. The initiative's success will depend on operators mapping dependencies, justifying investment, and redesigning remote access for crisis conditions.