Last week, the Cybersecurity and Infrastructure Security Agency (CISA) hosted a three-day cyber exercise, Cyber Storm VIII, which included more than 2,000 private sector, government, and international participants from approximately 200 organizations.
Cyber Storm is the most extensive cybersecurity exercise of its kind. The biennial exercise brings together the public and private sector to simulate response to a cyber crisis impacting the nation’s critical infrastructure. The exercise is designed to assess cybersecurity preparedness and examine incident response processes, procedures, and information sharing. It provides a venue for players to simulate the discovery of and response to a widespread coordinated cyberattack without the consequences of a real-world event. The scenario for Cyber Storm VIII involved both operational (e.g. industrial control systems) and traditional enterprise systems, with organizations experiencing various impacts such as ransomware and data exfiltration.
Cyber Storm is part of CISA’s commitment to partnering with the nation’s critical infrastructure stakeholders to continuously evaluate and improve the nation’s cyber resilience. Planning for Cyber Storm begins many months in advance and the exercise is not in response to any specific or credible threats.
“Over the last several months, we have been encouraging organizations to have their ‘Shields Up’ to ensure they’re prepared to respond to potential disruptive cyber activity. An important part of building cyber preparedness and resilience is exercising incident response capabilities, something CISA and our cybersecurity partners do regularly through exercises like Cyber Storm,” said CISA Director Jen Easterly. “CISA will continue to work with government and industry to safeguard our critical infrastructure, but everyone has a role to play. I encourage all organizations – regardless of size – to adopt a heightened posture when it comes to cybersecurity and protecting their most critical assets.”
Participants across the globe worked together to respond to a simulated significant cyber incident impacting critical infrastructure. Following the event, CISA will work with participating organizations to identify, share, and examine lessons learned to improve cyber incident response planning, information sharing, and response activities.
Exercises are critical to our nation’s cyber preparedness and resilience – bringing together the cybersecurity community to learn from each other in a safe environment. CISA is committed to providing the nation with access to a range of cybersecurity training and exercise offerings.
Learn more about Cyber Storm VIII here: https://www.cisa.gov/cyber-storm-viii
For information on steps organizations can take to better protect themselves, visit www.cisa.gov/shields-up
