Caracal Intelligence

Cyber security / Global critical infrastructure

CISA and partners publish guidance for isolating vital systems

CISA and international partners released CI Fortify guidance on 28 July.

Review cut-off
Review window
2026-07-24 to 2026-07-28
Published by Caracal Intelligence

Historical review. Published after the period covered. The cut-off is the end of the review date in UTC. We compare source dates and known updates with this cut-off. Some sources lack exact times or earlier versions. Business effects below are possible outcomes, not confirmed losses.

Reported event · 2026-07-28

What happened

CISA and international partners released CI Fortify guidance on 28 July. It set out steps to isolate vital operational technology and supporting systems during a major crisis.

Evidence: [1]

Caracal analysis / Possible effects

Global logistics

Ports, warehouses, plants, and utilities could need to sustain essential operations while links to business or supplier networks were disconnected. An untested isolation step could itself interrupt cargo handling.

Trade and supply chains

Recovery planning could affect supplier assurance and service commitments. The release offered preparation guidance, not evidence that every operator faced an active intrusion.

Industries to watch

Transport infrastructure, energy, water, manufacturing, and industrial service providers should test how essential processes function with limited connectivity.

  • Ports
  • Energy
  • Manufacturing

What to check next

  • Identify systems that must continue during isolation.
  • Test recovery and manual operating procedures with responsible staff.

Sources and evidence limits

  1. [1] CISA and international partners · Official guidance release · Published 2026-07-28

    CISA and partners publish guidance for isolating vital systems — source report

The guidance is a resilience measure. It does not establish a new incident at a particular facility or justify an unplanned shutdown.

Sources and claims checked on . This check compares the brief with dated source reports. It does not independently confirm every reported incident. Check current conditions before you change an operating plan.

Related briefings