Critical infrastructure operators face heightened risk from internet-exposed systems and CISA strongly urges these organizations to prioritize this guidance to safeguard essential services. This guidance benefits all organizations seeking to limit their internet-facing footprint.