CISA launches Cyber Storm X, a nationwide exercise to bolster cyber resilience

The Cybersecurity and Infrastructure Security Agency ran its biennial Cyber Storm exercise this week, a four-day national drill that brought together roughly 2,000 participants from government and industry to test how the country would respond to a major cyberattack on critical infrastructure.

Now in its 10th iteration over 20 years, Cyber Storm convenes operators of essential services—such as water, energy and transportation—to rehearse decision-making, validate policies and practice cross-sector coordination in a controlled setting, according to the Department of Homeland Security agency.

This year’s scenario centered on a simulated nation-state campaign against the transportation systems sector, including rail and ports, as well as the water and wastewater sector. The exercise was designed to evaluate incident response plans and stress-test information-sharing pathways among public- and private-sector partners. More than 200 organizations took part across federal, state, local, tribal and territorial governments and industry.

“Cyber Storm helps critical infrastructure owners and operators understand how we would manage a large-scale cyber incident,” Acting CISA Director Nick Andersen said. “Exercises strengthen our national resilience by making sure our plans, policies, and partnerships are ready when we need them. As a nation, we need the ability to respond swiftly and effectively to critical threats. That’s exactly what Cyber Storm does and why it’s a vital exercise for our nation’s security.”

CISA said it will work with participating organizations to capture lessons learned and publish a public after-action report with observations, analysis and recommendations. The agency described exercises like Cyber Storm as a cornerstone of its broader suite of cybersecurity tools and training intended to bolster national preparedness.