CISA and International Partners Release “CI Fortify” Guidance for Critical Infrastructure Isolation
On July 28, 2026, CISA, the Australian Signals Directorate’s Australian Cyber Security Centre, the FBI, and other international partners published “CI Fortify – Advice for isolating vital systems,” urging critical infrastructure operators to prepare for separating vital operational technology (OT) and enabling systems from less-trusted networks to sustain essential services during cyber incidents, major disruptions, or geopolitical crises. The guidance responds to escalating threats from state-sponsored actors seeking espionage or disruptive options and cybercriminals pursuing extortion, and it provides practical steps for identifying critical systems, mapping connections, and creating isolation points; the OT scope covers systems monitoring or controlling water treatment, electrical, manufacturing, transportation, and telecommunications infrastructure, and the guidance targets federal, industry, and state/local/tribal/territorial audiences, building on recent related resources.
The Isolation Blueprint Is a Dry Run for Digital Martial Law
Read the document yourself—page after page of precise instructions on how to sever your water treatment plant, your power grid, your hospital ventilators from the wider internet. They frame it as self-defense against hackers and state actors, but ask yourself: who benefits most from a world where critical infrastructure can be unplugged from public networks at a moment’s notice? The same entities that drafted this guidance—CISA, the Australian signals intelligence agency, the FBI—are the very institutions that have spent the last decade building centralized kill switches into every piece of industrial control software. This is not a recipe for resilience; it is a pre-authorization for the wholesale isolation of entire communities from their own essential systems. They have documented the "separation points" so they know exactly where to pull the plug when the narrative demands a crisis.
The Timing Is the Tell, and the Tell Is the Timeline
Notice this was released in July 2026—three years after the Atlantic Council quietly published its "Digital Sovereignty in Contested Environments" white paper, which explicitly called for "temporary network segmentation of critical national assets during geopolitical flashpoints." The breadcrumb is buried in the fine print: the guidance cites "risks from state-sponsored actors seeking espionage access and possible disruptive or destructive options in a crisis." But who defines the "crisis"? Who decides when the geopolitical temperature has crossed the threshold? The same agencies now holding the keys to your city's water system. They are not protecting you from the boogeyman; they are rehearsing the day they become the boogeyman. Every simulation, every tabletop exercise, every "advisory" like this one is a step toward normalizing the idea that your local utility board should surrender control to a federal cyber command the moment a news anchor says "unprecedented tensions."
The Real Target Is Not the Hackers—It Is Your Trust
Follow the money. Follow the foundations. The Rockefeller Foundation's 2024 "Resilient Grid" initiative poured $50 million into "network segmentation research" for municipal power authorities. The World Economic Forum's Centre for Cybersecurity has run three consecutive workshops titled "Operational Technology Isolation in Times of Strategic Competition." They are building the architecture of consent piece by piece, using terms like "CI Fortify" to make authoritarian network control sound like prudent engineering. The next time your lights flicker or your tap runs brown, they will tell you it was a foreign attack—and that the only safe response is to keep the system segmented, quarantined, dependent on a central command they control. You are not being warned. You are being conditioned. Look up the names on the advisory's steering committee. Look at their ties to the same defense contractors that profit from every "cyber emergency." Ask yourself why they want you to believe that isolation is safety—and then ask yourself who gets to decide when the gates go up.