Governance Briefing — CISA issues Essential Critical Infrastructure Workforce guidance v1.0
CISA released Version 1.0 of its Essential Critical Infrastructure Workforce list on 19 March 2020 to help jurisdictions and companies identify personnel who should maintain on-site access during COVID-19 restrictions.
Executive briefing: On , CISA issued Version 1.0 of its Essential Critical Infrastructure Workforce guidance to support state and local COVID-19 shelter-in-place decisions and help operators identify personnel who should retain facility and travel access.
What changed
- Provided an initial, non-binding list of essential workers across 16 critical infrastructure sectors, including health care, IT, communications, transportation, food, energy, and financial services.
- Encouraged jurisdictions to use the list to inform access letters, travel permits, and facility credentialing during stay-at-home orders.
- Set expectations for periodic updates as sectors clarified operational needs during the pandemic.
Why it matters
- Organizations needed clear, nationally recognized criteria to keep critical staff on-site without conflicting with local restrictions.
- Supply chain partners, service providers, and logistics teams relied on the list to justify travel and delivery continuity.
- Gave security and HR teams a federal template for essential worker letters and badge provisioning.
Action items for operators
- Identify roles mapped to CISA’s essential worker categories and maintain documentation supporting on-site access and travel exceptions.
- Coordinate with legal and HR to issue access letters or credentials aligned with local orders and the CISA guidance.
- Review contractor and supplier access needs to ensure critical third parties are covered by equivalent essential worker designations.
Continue in the Governance pillar
Return to the hub for curated research and deep-dive guides.
Latest guides
-
Public-Sector Governance Alignment Playbook — Zeph Tech
Align OMB Circular A-123, GAO Green Book, OMB M-24-10 AI guidance, EU public sector directives, and UK Orange Book with digital accountability, risk management, and service…
-
Third-Party Governance Control Blueprint — Zeph Tech
Deliver OCC, Federal Reserve, PRA, EBA, DORA, MAS, and OSFI third-party governance requirements through board reporting, lifecycle controls, and resilience evidence.
-
Governance, Risk, and Oversight Playbook — Zeph Tech
Operationalise board-level governance, risk oversight, and resilience reporting aligned with Basel Committee principles, ECB supervisory expectations, U.S. SR 21-3, and OCC…




