CISA, FBI release guidance for outage communications by service providers

CISA and the FBI, with international partners, released guidance on how service providers should communicate during IT and OT outages.
CISA and the FBI, with international partners, released guidance on how service providers should communicate during IT and OT outages.
The U.S. Cybersecurity and Infrastructure Security Agency, the FBI and international partners published guidance on Sept. 2, 2026, on how service providers should communicate during information technology and operational technology outages.
The document, titled Communicating Under Pressure: Best Practices for Service Providers, says outages can stem from cyber threat actors, human error, equipment failure or natural hazards. It says those disruptions can spread across connected systems, creating uncertainty and alarm beyond the first affected organization.
CISA says clear, accountable and transparent communication can help inform affected stakeholders and the public, reduce speculation and preserve trust while organizations work to contain an incident.
According to the publication, outage communications should also align with legal requirements, operational security, law enforcement and containment efforts. It says changes in service availability, including defensive isolation, require transparent and ongoing updates so end users can limit operational impact.
CISA says its CI Fortify initiative offers information and resources to help critical infrastructure organizations prepare to isolate and recover vital OT systems during a major cyber incident or crisis. The guidance also advises owners and operators to assume telecommunications may be disrupted or unreliable and to build backup communication methods into crisis plans.
The publication is a practical guide rather than a rule or enforcement action. It is aimed at service providers and critical infrastructure operators that may need to explain service interruptions while restoring systems and limiting further harm.
CISA’s publication page lists the FBI and international partners as co-developers of the guidance. The page says the resource is intended to help organizations communicate under pressure when outages affect services and public confidence.
CISA’s publication page points readers to the resource and to CI Fortify for additional material on preparing for and recovering from major cyber incidents.
Sources
Editorial note: This article was prepared with AI assistance and includes source attribution for reader review.
View the Web StoryA visual, tap-through version of this reportThis is the AMP version of the article. Read the full article on Atlas Watchline.