Exercise Planning and Conduct Support Services

Task type
Increase your resilience
Readiness Level
Foundational, Intermediate, Advanced


To assist stakeholders in examining their cybersecurity and physical security plans and capabilities, CISA provides end-to-end exercise planning and conduct support, including planning meetings, document and scenario development, facilitation, and after-action report development. CISA uses the Homeland Security Exercise and Evaluation Program (HSEEP) methodology in the design, development, and execution of exercises. HSEEP uses a common methodology across all mission areas to ensure maximum integration with all Department of Homeland Security (DHS) and external stakeholders.

Example Exercise Scenarios

Infrastructure Security

  • Active Shooter
  • Complex Coordinated Terrorist Attack
  • Vehicle Ramming
  • Improvised Explosive Device (IED)


  • Phishing
  • Ransomware
  • Loss of Personally Identifiable Information (PII)
  • Industrial Control Systems Compromise

Discussion-based Exercises

  • Seminar
  • Workshop
  • Tabletop
  • Game

Operations-based Exercises

  • Drill
  • Functional
  • Full-Scale