CISA Urges Transparency Amid Rising Cyber Outages

• •CISA released guidance for transparent communication during IT and OT outages.
• •The advisory emphasizes immediate updates and actionable information for users.
• •All U.S. states mandate breach reporting, yet companies often prioritize liability over transparency.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued new guidance urging service providers to communicate transparently during significant IT and operational technology outages. This advisory, developed with the FBI and international partners, emphasizes the importance of timely and accurate updates to minimize user confusion and operational impact. The document, titled 'Communicating Under Pressure: Best Practices for Service Providers', addresses the ongoing issue of ineffective communication during outages, which can lead to societal panic and disruption. CISA's advisory calls for immediate communication, actionable guidance, and accountability from service providers. The shift aims to enhance trust and transparency in breach notifications, as organizations often prioritize liability protection over user awareness. All 50 U.S. states have laws mandating breach reporting, yet many companies still fail to provide adequate information during incidents. The advisory represents a significant regulatory shift towards more candid disclosure practices.