if the exercise relates to all types of cyber security incidents—the purpose of which is to: