“

We tried to force the participants to manage a degradation of their capabilities, and then respond to a cyberattack when they already had staff working from home, had introduced social distancing and were managing potential reputational damage due to their response to the pandemic.