CISA Launches CI Fortify to Defend Critical Infrastructure From Nation-State Cyber Threats

CISA launched the CI Fortify initiative to improve critical infrastructure resilience against nation-state cyber threats — emphasizing isolation of OT systems from external networks and robust recovery planning. The guidance responds to concerns that sophisticated threat actors (cited example: the Volt Typhoon campaign) have established long-term access inside infrastructure environments and may be positioned to disrupt services during geopolitical crises; CISA urges operators, vendors, and service providers to identify dependencies, maintain secure backups and documentation, and practice manual recovery to sustain essential operations.