The National Cyber Exercise: Cyber Storm (CS) is the Department of Homeland Security’s (DHS) capstone national-level cybersecurity exercise and represents the Nation’s most extensive cybersecurity exercise effort of its kind (Figure 1). CS is a Homeland Security Exercise and Evaluation Program (HSEEP) Tier II exercise focusing on federal strategy and policy. The Department’s National Cyber Security Division (NCSD) sponsors the biennial exercise to improve the capabilities of the cyber incident response community; encourage the advancement of public–private partnerships within the critical infrastructure sectors; and strengthen relationships between the Federal Government and partners at the state, local, and international levels. The CS exercise series provides the cyber incident response community with the opportunity to continuously learn and assess its capabilities, building on previous experience, lessons learned, and exercise findings.
CS III included participation from 8 Cabinet-level departments, 13 states, 12 international partners, and approximately 60 private-sector companies and coordination bodies. Participation focused on the information technology (IT), communications, energy (electric), chemical, and transportation critical infrastructure sectors and incorporated various levels of play from other critical infrastructure sectors. Together, these entities participated in the design, execution, and post-exercise analysis of the largest, most comprehensive Government-led, full-scale cyber exercise to date.
