All exercises include a sample scenario outline that illustrates the flow of a cyber crisis exercise, including containment actions, engaging with attackers, external communication, unintended consequences, recovery, and restoration.