CIME – Center for Cybersecurity Innovation & Outreach

Who makes decisions?
How do we communicate?
What operations must continue?
What do we do when information is incomplete?

Executives and elected officials
Department heads
Finance, HR, legal, and communications staff
Frontline and administrative personnel

IT and security staff (scenario development and realism)
Trained facilitators and exercise controllers

Scenario introduction with limited technical detail
Escalating injects focused on operational impact
Decision points requiring discussion and judgment
Communication challenges and trade-offs
Facilitated debrief and lessons learned

A clearer understanding of their role during a cyber incident
Increased confidence in decision-making
Practical ideas for improving preparedness
A shared language for future incidents

Organizational CIME
Designed for a single organization such as a city, county, school district, utility, nonprofit, or business.

Best for:
- Clarifying internal roles
- Testing leadership and communication
- Identifying gaps in plans and assumptions
Typical setting:
One organization is working through a shared scenario.
Conference CIME
Designed for conferences, workshops, or professional meetings where participants come from different organizations.

Best for:
- Reinforcing a conference theme
- Creating shared learning across organizations
- Encouraging discussion without exposing internal details
Typical setting:
Mixed groups working through the same scenario and comparing approaches.
“CIME of One” / Public CIME
Designed for individuals who are not affiliated with a shared organization.

Best for:
- Public education and awareness
- Community outreach
- Extension programs and classrooms
Typical setting:
Workshops or public events focused on learning rather than organizational planning.