The forthcoming guidance will draw on CISA assessments of how well critical infrastructure organizations can isolate and recover systems. […]