§665h National Cyber Exercise Program

Summary

Creates a National Cyber Exercise Program inside the Agency to test the National Cyber Incident Response Plan and related strategies. The program must use current risk information (threats, vulnerabilities, and likely harms). It should, when possible, mimic partial or total loss of government or critical infrastructure networks from a cyber incident. The program must check cyber readiness, improve how responders share information, quickly make after-action reports and follow-up plans, and provide model exercises and help public and private groups design, run, and evaluate exercises that match national, State, local, or Tribal plans. The Director may consult Sector Risk Management Agencies, the Office of the National Cyber Director, cyber research stakeholders, and Sector Coordinating Councils. Definitions: "State" — includes the 50 states, the District of Columbia, Puerto Rico, the Northern Mariana Islands, the U.S. Virgin Islands, Guam, American Samoa, and other U.S. territories. "Private entity" — defined in section 1501. The program does not change the FEMA Administrator’s authorities under section 748.