The US and Australian governments have released new cybersecurity guidance urging critical infrastructure organizations to be ready to isolate important operational technology (OT) systems during a cyberattack or other major disruption. The goal is to help essential services continue operating even if their networks are compromised.
The guidance recommends separating critical OT systems from corporate, internet-facing, and other less-trusted networks to reduce the impact of cyber incidents.
“This CI Fortify guide helps critical infrastructure organisations improve their cyber resilience. Developed with international partners, the guide explains how organisations can isolate critical operational technology (OT) and supporting systems from other networks during cyber incidents or periods of increased cyber threat. It provides practical guidance and strategic advice for OT owners, operators, and cyber security teams. By reviewing and applying this guidance, organisations can strengthen their ability to prepare for, respond to, and recover from cyber incidents,” the authoring agencies wrote.
The agencies warned that state-sponsored hackers regularly target critical infrastructure to gather intelligence and gain long-term access to networks. The access could later be used to launch disruptive or destructive cyberattacks during a crisis or military conflict. Cybercriminals also continue to target organizations with ransomware attacks and data theft because of the valuable information they store and the importance of the services they provide.
In February 2024, CISA, the FBI, the NSA, and other Five Eyes partners disclosed that the Chinese-linked Volt Typhoon group had breached organizations in the communications, energy, transportation, and water sectors. Officials said the hackers remained hidden in at least one critical infrastructure network for five years.
Another Chinese-affiliated group, tracked as Salt Typhoon, has also been linked to cyberattacks against government agencies and organizations in the telecommunications, transportation, lodging, and military sectors around the world since at least 2021.