In brief: CISA and Australian authorities call on critical infrastructure operators to proactively plan and test the isolation capability of their OT systems.
The U.S. CISA and Australian government authorities have published guidance calling on operators of critical infrastructure to prepare for the isolation of Operational Technology (OT) systems in the event of cyberattacks.
The new guidance is directed at organisations in the critical infrastructure sector and specifically addresses the isolation capability of operational technology systems. This is intended to prepare them for emergencies – whether from cyberattack scenarios or other significant disruptions – without having to make ad-hoc decisions under time pressure.
The recommendations follow the principle of resilience through preparation: organisations should establish the technical and procedural prerequisites in their normal operating phase to enable them to quickly disconnect OT network segments from the rest of the infrastructure as needed. This covers network design, interfaces with IT systems and communication protocols.
For CISOs, this means an explicit requirement to integrate OT isolation scenarios into their continuity and disaster recovery plans, test them regularly and factor them into risk modelling. Preparation for isolation is thus no longer an optional hardening feature, but part of the governance and risk management framework.
Source: www.bleepingcomputer.com · Published 28 July 2026
Lumi AI News — AI-assisted curation in accordance with Article 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.3.