Primary Mitigations to Reduce Cyber Threats to Operational Technology

Cyber threats targeting operational technology (OT) systems continue to pose a serious risk to U.S. critical infrastructure. In response, CISA, the FBI, EPA, and DOE have outlined key mitigations, including disconnecting OT from the public internet, securing remote access with MFA, segmenting networks, and maintaining manual operation capabilities. The guidance urges close coordination with system integrators and vendors to prevent misconfigurations and emphasizes alignment with CISA and NIST cybersecurity performance goals. These actions aim to reduce vulnerabilities across industries relying on OT.