CISA Calls for Clear Communication From Service Providers During Large‑Scale IT and OT Disruptions

The Cybersecurity and Infrastructure Security Agency (CISA) has issued new guidance that asks internet service providers, cloud operators, and other critical‑infrastructure vendors to share prompt, accurate and transparent updates whenever a major information‑technology (IT) or operational‑technology (OT) outage occurs.

Agency officials say the push comes after a series of high‑profile disruptions – from ransomware‑induced plant shutdowns to widespread broadband failures – where customers and downstream partners were left guessing about the scope and expected resolution time. In the absence of reliable information, businesses can make poor decisions, emergency responders may be hampered, and public confidence erodes.

The advisory outlines a set of best‑practice steps. Providers are encouraged to issue an initial notification within one hour of confirming a significant outage, detail the systems affected, estimate restoration timelines, and update stakeholders at regular intervals, preferably every two hours. Communication should be delivered through multiple channels – email alerts, status‑page feeds, social media, and, where appropriate, direct phone calls – and should be coordinated with CISA’s incident‑response teams to ensure consistency and to prevent the spread of rumors.

Industry groups have largely welcomed the recommendations, noting that clearer messaging can reduce the “information vacuum” that often fuels speculation. Some smaller operators, however, expressed concern about the resource demands of maintaining real‑time status updates, especially during complex cyber incidents that evolve rapidly. CISA acknowledges these challenges and says the agency will provide template language and technical assistance to help firms meet the new expectations.

If widely adopted, the guidance could become a de‑facto standard for handling large‑scale disruptions across both the private and public sectors. CISA indicated it will monitor compliance through its existing partnership programs and may link adherence to eligibility for certain federal grants aimed at bolstering critical‑infrastructure resilience. Analysts predict that more transparent communication will not only improve response coordination but also limit the economic fallout that typically follows prolonged service outages.