United States Government Publishing Office publisher pbl distributor dst United States Government Accountability Office author aut Government Organization text government publication eng GAOREPORTS Legislative Agency Publications gao legislative 2010-08-12 U.S. Government Printing Office 2008-09-09 monographic deposited born digital 39 p. GA 1.13:GAO-08-825 https://www.govinfo.gov/app/details/GAOREPORTS-GAO-08-825 P0b002ee1803a1dd8 f:d08825 DGPO 2010-08-12 2011-03-24 GAOREPORTS-GAO-08-825 machine generated eng fdlp REPORT GAOREPORTS-GAO-08-825 GAO-08-825 Access control Classified defense information Computer incident response capability Computer security Confidential communication Contingency plans Critical infrastructure Critical infrastructure protection Cyber crimes Cyber security Federal agencies Foreign governments Homeland security Information access Information security Information technology Interagency relations Lessons learned Private sector Risk assessment Risk management State governments Strategic planning Program implementation DHS Cyber Storm Exercise Other Written Product A84203 Federal policies establish the Department of Homeland Security (DHS) as the focal point for the security of cyberspace. As part of its responsibilities, DHS is required to coordinate cyber attack exercises to strengthen public and private incident response capabilities. One major exercise program, called Cyber Storm, is a large-scale simulation of multiple concurrent cyber attacks involving the federal government, states, foreign governments, and private industry. To date, DHS has conducted Cyber Storm exercises in 2006 and 2008. GAO agreed to (1) identify the lessons that DHS learned from the first Cyber Storm exercise, (2) assess DHS's efforts to address the lessons learned from this exercise, and (3) identify key participants' views of their experiences during the second Cyber Storm exercise. To do so, GAO evaluated documentation of corrective activities and interviewed federal, state, and private sector officials. https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-08-825/html/GAOREPORTS-GAO-08-825.htm https://www.govinfo.gov/content/pkg/GAOREPORTS-GAO-08-825/pdf/GAOREPORTS-GAO-08-825.pdf GAO-08-825 https://www.govinfo.gov/app/details/GAOREPORTS-GAO-08-825 Other Written Product GAO-08-825; Critical Infrastructure Protection: DHS Needs to Fully Address Lessons Learned from Its First Cyber Storm Exercise; Access control Classified defense information Computer incident response capability Computer security Confidential communication Contingency plans Critical infrastructure Critical infrastructure protection Cyber crimes Cyber security Federal agencies Foreign governments Homeland security Information access Information security Information technology Interagency relations Lessons learned Private sector Risk assessment Risk management State governments Strategic planning Program implementation DHS Cyber Storm Exercise Public Law 107-296