The BiPartisian Policy Center has announced plans for a simulated cyber-attack next week, as a kind of incident response exercise for government officials who may be called upon (one day) to respond to a real attack.
What do you think about spending time and resources on these activities and how would you recommend that the results be evaluated without exposing potential areas of vulnerability?
Share your thoughts.

4 Comments
This event is absolutely needed to protect the U.S. from potential cyber attacks. The number of stories about cyber risks is beginning to become routine. The alleged attack against Google from China is a prime example of why we need to take cyber threats seriously. More important than the Google attack, the vulnerabilities that exist in our power grid and industrial control systems are another reason the government should conduct this drill. Remember what happened to Estonia several years ago when their banking system was shutdown for 30 days by the Russians.
The U.S. cannot afford to be crippled by cyber attacks. We don’t need a cyber 9/11 or Pearl Harbor. The only way to prepare for an attack is to know what to do if one actually occurred. Hope for the best, but prepare for the worse.
I agree that it is important that we know where our risks may be. What is less clear to me is whether or not this particular exercise will help locate those areas of risk or if it might not lull us into a false sense of security if not designed properly.
It is a proactive approach, to prepare and drill, that’s how the military stays sharp. This would be an awesome Action Research study for a PhD candidate, how can we get in on the action?
The three letter agencies have an interest in IAS education. I would recommend that you visit the links to the National Center of Excellence above as a starting point to some of the ways that the IAS community might be able to participate in these kinds of federal efforts.