H.R. 3223 would establish a cybersecurity exercise program to evaluate strategies and plans for responding to cyber incidents. The Cybersecurity and Infrastructure Security Agency currently operates the Cyber Exercise Program, which meets the requirements of the bill. Because H.R. 3223 would codify the agency’s current practices, implementing the bill would not affect the federal budget.