Page 30 of the DSE Networks & Infrastructure knowledge center, with source-backed guidance and practical next steps.
Guidance for resilient networks, Wi-Fi, firewalls, cabling, power, exposure reduction, and connected-device planning.
CISA’s Cyber Hygiene services provide no-cost vulnerability scanning of internet-accessible assets with weekly reports and urgent alerts, and web application scanning with monthly reports, to federal, state, local, tribal and territorial governments and public and private critical infrastructure organizations. Enrollment is by email.
Read the guide
NIST operates stratum-1 time servers linked to UTC(NIST) and asks users to reach them through the round-robin name time.nist.gov, never hard-code one server name or address into a device, and never query more than once every 4 seconds. It strongly encourages moving from the old TIME and DAYTIME protocols to NTP.
Read the guide
OSHA requires fall protection at 4 feet in general industry and 6 feet in construction, and its roofing guide says covers over skylights and roof openings must hold at least twice the expected load, be secured against displacement and be marked HOLE or COVER. Personal fall arrest systems must keep any free fall to 6 feet or less.
Read the guide
OSHA says trench collapses pose the greatest risk to workers in excavations, requires a protective system for trenches 5 feet deep or more and an engineer-designed one at 20 feet or more, and requires a competent person to inspect trenches and protective systems daily and as conditions change before work begins.
Read the guide
Michigan’s MISS DIG Underground Facility Damage Prevention and Safety Act requires excavators to give the MISS DIG notification system a dig notice at least 72 hours, but not more than 14 calendar days, before powered digging, and to expose marked facilities by soft excavation before using power equipment within 48 inches of the marks.
Read the guide
Cisco’s event response page, last updated April 24, 2026, says the ArcaneDoor actor exploited ASA 5500-X firewalls with VPN web services enabled, gained persistence on models without Secure Boot, and has broadened to any device running ASA or FTD software. The 5506-X, 5508-X and 5516-X reached their last date of support on August 31, 2026.
Read the briefing
Let’s Encrypt stopped sending expiration notification emails on June 4, 2025, dropped OCSP URLs from certificates on May 7, 2025 and turned off its OCSP responders on August 6, 2025, providing revocation information through CRLs instead. It warned that some non-browser software, such as VPNs, might be affected.
Read the briefing
The EU Cyber Resilience Act entered into force on 10 December 2024. Manufacturers have had to report actively exploited vulnerabilities and severe incidents since 11 September 2026, and the main obligations apply from 11 December 2027, including secure-by-default design, a stated support period and CE marking.
Read the briefing
EPA’s Lead Renovation, Repair and Painting Rule covers paid work, including electrical work, that disturbs paint in housing and child-occupied facilities such as schools and child care centers built before 1978. It requires firm certification, certified renovators and lead-safe work practices, with exclusions for minor work below set paint-area limits.
Read the briefing
OSHA’s respirable crystalline silica standard for construction lets employers follow Table 1 controls or measure exposure. For handheld and stand-mounted drills, OSHA’s fact sheet describes a shroud with a vacuum dust collection system and a filter of 99 percent or better efficiency, and every covered employer needs a written exposure control plan.
Read the guide