§665h National Cyber Exercise Program

Summary

Creates the National Cyber Exercise Program inside the Agency to test the National Cyber Incident Response Plan and related plans. The program must use current risk information (threats, weaknesses, and likely effects). Exercises should try to copy what happens if a government or critical infrastructure network is partly or completely knocked out by a cyber attack. The program must check how ready responders are, improve how the response system and information sharing work, and quickly make after-action reports and improvement plans. It must also offer model exercises that governments and private groups can adapt and help those groups design, run, and evaluate exercises that meet the program’s goals and match applicable national, State, local, or Tribal plans. The Director may consult risk agencies, the Office of the National Cyber Director, cybersecurity researchers, and Sector Coordinating Councils. State: list of U.S. States, territories, and possessions. Private entity: as defined elsewhere in law. Nothing here changes the FEMA Administrator’s existing legal authorities.