In March of 2026, the Maryland-National Capital Region Emergency Response System (MDERS) assisted the Montgomery County Office of Emergency Management and Homeland Security (MC OEMHS) in developing and executing a workshop on its Cyber Incident Consequence Management Plan (CICMP). The exercise included participation from the Montgomery County Police Department (MCPD), MC OEMHS, the Montgomery County Office of the County Attorney, the Montgomery County Department of Technology and Enterprise Business Solutions (TEBS), the Montgomery County Office of Public Information, and the Montgomery County Department of Finance. The exercise successfully brought together these entities to discuss the CICMP and refine the document based on the results of the exercise.
The interconnectedness and pervasiveness of technology present significant vulnerabilities for governments. Vital information systems, communication networks, and service platforms are essential functions that are susceptible to outages. The cascading impacts of these potential failures can severely disrupt government operations. Understanding the implications and roles of each entity is imperative for a successful response and management of a cyber incident.
This workshop was the culmination of a multi-month planning effort between MDERS, MC OEMHS, and TEBS. The exercise workgroup met multiple times to devise a scenario that would test the CICMP and allow for discussions on the improvement of the plan.
During the exercise, 14 participants navigated a scenario involving the activation of the CICMP and worked together to cohesively manage Montgomery County’s response. The discussion yielded valuable insights for each agency and will help MC OEMHS to enhance the CICMP. The exercise concluded with a hotwash that identified the strengths and areas for improvement. All this information will be shared in an after-action report (AAR) with exercise participants.
The workshop provided agencies with invaluable information, and MDERS will continue to partner with them to enhance response efforts in the Maryland-National Capital Region.
Written by Katie Dwyer