CISA Scales Back Free Cybersecurity Assessments for Critical Infrastructure Operators

The Cybersecurity and Infrastructure Security Agency (CISA) has decided to discontinue six of its free cybersecurity assessments offered to critical infrastructure organizations. Citing workload concerns, the agency will no longer perform Cyber Resilience Reviews, Ransomware Readiness Assessments, and other similar surveys. This move represents a significant shift in CISA's strategy for helping secure the nation's critical infrastructure and could leave organizations without valuable insights into their vulnerabilities.