CISA Launches CI Fortify to Enhance Critical Infrastructure Resilience Amid Cyber Threats

• •CISA's CI Fortify initiative aims to prepare critical infrastructure for prolonged isolation during attacks.
• •Operators are urged to develop plans for maintaining essential services without external connectivity.
• •The initiative responds to ongoing threats from state-sponsored hackers, particularly from China.

The Cybersecurity and Infrastructure Security Agency (CISA) has initiated the CI Fortify program to bolster the resilience of critical infrastructure operators against cyberattacks. This initiative encourages organizations to prepare for scenarios where they may need to operate in isolation from the internet and third-party services for extended periods, potentially weeks to months. CISA's acting director, Nick Andersen, highlighted the urgency of this initiative due to ongoing threats from state-sponsored hackers, particularly from Chinese groups like Salt Typhoon and Volt Typhoon. The program aims to ensure that essential services, such as electricity and water, can continue even when networks are compromised. CISA will provide technical assessments and guidance to help organizations develop internal plans for maintaining service levels during disruptions. The initiative comes in response to recent geopolitical conflicts that have seen critical infrastructure targeted by cyberattacks. CISA emphasizes that this approach is not traditional air-gapping but a controlled isolation strategy. The program is currently in a pilot phase with select organizations, and CISA plans to expand its efforts as staffing increases.