What's Happening?
The Australian Signals Directorate (ASD) has issued new guidance for critical infrastructure operators, advising them to be prepared to isolate their systems from external networks for up to three months in the event of a crisis or conflict. This guidance follows
a year-long consultation with the industry and aims to enhance resilience against cyber threats. The ASD emphasizes the importance of being able to fully disconnect operational technology and vital systems from the internet and other networks to protect against state-sponsored espionage and cybercrime.
Why It's Important?
The guidance highlights the growing threat of cyberattacks on critical infrastructure, which can have severe consequences for national security and public safety. By preparing for system isolation, operators can mitigate the risks associated with cyber threats and ensure the continuity of essential services. The ability to disconnect from external networks is a crucial measure of resilience, particularly in an increasingly complex threat environment where cyberattacks may blend criminal and geopolitical objectives.
What's Next?
Critical infrastructure operators will need to implement the ASD's guidance by developing and testing isolation plans. This involves identifying vital systems and networks, as well as distinguishing between vital and business systems. The guidance also calls for a graduated approach to reducing exposure to external networks before full isolation is necessary. Operators will need to invest in understanding and potentially reconfiguring their systems to meet the segmentation and isolation requirements.
