CISA Cybersecurity Exercise Support Services

Requirement

The OASIS+ domain is Management & Advisory. The Contractor shall provide CISA's Infrastructure Security Division (ISD) with full-spectrum cybersecurity exercise support services in accordance with Homeland Security Exercise and Evaluation Program (HSEEP) guidelines. HSEEP defines two types of exercises: discussion-based and operations-based. Discussion-based exercises familiarize players with plans, policies, agreements, and procedures. Examples of these exercises are seminars, workshops, facilitated discussions, tabletop exercises (TTX), and games. Operations-based exercises validate the plans, policies, agreements, and procedures that were reviewed in the discussion-based exercises. Examples of operations-based exercises are drills, functional exercises (FE), and full-scale exercises (FSE). Cybersecurity Exercises include providing a wide spectrum of skills ranging from programmatic and administrative support (program management, front office support, meeting planning and technical document development) to critical exercise specific skills (scenario development, cyber subject matter expertise, exercise facilitation, and critical infrastructure knowledge).