ICS4ICS Exercises
ICS4ICS exercises allow participants to understand the value of ICS4ICS by showing how the ICS4ICS team manages many aspects of a cyber incident.
Benefits of ICS4ICS Exercises
- Expedited resolution of cyber incidents by providing effective management processes
- Establish the Incident Commander as the final authority to make decisions
- Provide clear roles and responsibilities of all ICS4ICS Team members
- Ensure all cyber incident staff are performing their work based on the same set of orders
- Allow the various teams to focus on their work to resolve the incident while receiving periodic directions from the ICS4ICS Team
"ICS4ICS helped us validate our Incident Command System knowledge by running an exercise that helped us identify gaps in our incident response plan. Most importantly, it brought together our IT, Control Systems Group, and ERT to work collaboratively."
- Durgesh Kalya, OT Network Security Expert
ICS4ICS Exercise Materials
ICS4ICS videos
Demonstrates an overview of how the ICS4ICS team works together.
ICS4ICS Exercise Presentation
Presentation used to lead an in-person or virtual exercise with players acting out the various roles OR show videos of recorded players
View Presentation (coming soon)
FEMA and Other Exercise Materials
The ICS4ICS exercise materials were developed based on:
- FEMA provided exercise overview information
- FEMA ICS resource center information: ICS resource center (fema.gov)
- FEMA Homeland Security Exercise Evaluation Program (HSEEP)
- FEMA exercise evaluation guides
- CISA tabletop exercise package
- FEMA ICS forms
- FEMA ICS forms can be download together:NIMS ICS forms booklet
Past ICS4ICS Exercises
Exercise
Date
Comments and Links
2024
2023
ISA Automation & Leadership Conference
Virtual exercise
Jul 13, 2023
Jun 28, 2023
Asia-Australia exercise – Virtual (coming soon)
ISA - OT Cybersecurity Summit
2022
ICS4ICS Exercise at S4
ICS4ICS exercise at first large public event
ICS4ICS Exercise Team
Monthly Newsletter
Want to be added to the ICS4ICS monthly newsletter or join some of the ICS4ICS teams?