- technical response
- organizational decision-making
- internal and external coordination
- CIME: Non-IT participants, decision-focused, continuity-oriented
- CySIM: IT and non-IT participants together, integrated technical and organizational response
- Organization-wide cyber exercises
- Multi-organization or regional exercises
- Statewide exercises with coordinated locations
- IT-focused simulations with leadership engagement
- Improved coordination between IT and leadership
- Better understanding of dependencies and impacts
- Identification of technical and organizational gaps
- Actionable insights captured through after-action reporting