1. Home
  2. |Insights
  3. |Cybersecurity and Infrastructure Security Agency Issues Guidance on “Essential” Critical Infrastructure Workers During COVID-19

Cybersecurity and Infrastructure Security Agency Issues Guidance on “Essential” Critical Infrastructure Workers During COVID-19

Client Alert | 2 min read | 03.19.20

Today, the Cybersecurity and Infrastructure Security Agency (CISA) released guidance to help state and local jurisdictions and the private sector identify and manage their essential workforce while responding to coronavirus (COVID-19). The White House Coronavirus Guidelines direct that Critical Infrastructure Industry, as defined by the Department of Homeland Security, has a special responsibility to maintain normal work schedules.

CISA executes the Secretary of Homeland Security’s delegated responsibilities as assigned under the Homeland Security Act of 2002 to provide strategic guidance, promote a national unity of effort, and coordinate the overall Federal effort to ensure the security and resilience of the Nation's critical infrastructure. The list of Essential Critical Infrastructure Workers was developed in coordination with Federal agencies and the private sector as a guide to help decision-makers within communities understand how to ensure continuity of essential functions and critical workforce as they consider COVID-related restrictions in certain communities (e.g., shelter-in-place). The list can also inform critical infrastructure community decision-making to determine the sectors, sub sectors, segments, or critical functions that should continue normal operations, appropriately modified to account for Centers for Disease Control (CDC) workforce and customer protection guidance.

There are 16 critical infrastructure sectors whose assets, systems, and networks, whether physical or virtual, are considered so vital to the United States that their incapacitation or destruction would have a debilitating effect on security, and the guidance goes into detail on identifying essential critical workforce for:

  • Healthcare/Public Health
  • Law Enforcement, Public Safety, First Responders
  • Food and Agriculture
  • Energy (Electricity industry, Petroleum workers, and natural and propane gas workers)
  • Water and Wastewater
  • Transportation and Logistics
  • Public Works
  • Communications and Information Technology
  • Other Community-Based Government Operations and Essential Functions
  • Critical Manufacturing
  • Hazardous Materials
  • Financial Services
  • Chemical
  • Defense Industrial Base

CISA cautions this guidance is only advisory, and should not be considered as a Federal directive or standard, explicitly recognizing that State, local, tribal, and territorial governments are ultimately responsible for implementing and executing response activities in their communities, while the U.S Government is in a supporting role.

Crowell is working with many clients to identify options to enable them to continue operations in support of critical infrastructure missions.

Contacts

Insights

Client Alert | 2 min read | 03.27.26

CMS Releases PY 2020 RADV Audit Methods and Instructions: Key Takeaways for Health Plans

On March 20, 2026, the Centers for Medicare and Medicaid Services (CMS) released new guidance outlining the agency’s audit methods and instructions for Medicare Advantage (MA) plans subject to upcoming risk adjustment data validation (RADV) audits for payment year (PY) 2020. In addition to providing necessary context for MA plans selected for auditing, this resource clarifies CMS’s methodological and procedural expectations. While the high-level takeaways are recapped below for convenience, we strongly recommend that MA organizations selected for PY 2020 audits closely review the guidance to understand what may be involved — or required — during the agency’s review....

View All Insights