This scenario centres on a client who does not host servers or infrastructure with NexusIT, instead utilising their services for cybersecurity monitoring, helpdesk support, and potentially cloud application management (SaaS). This design pivots the exercise from a traditional core infrastructure outage to a distinct type of service disruption, where the client's own infrastructure may remain operational, but their critical IT support and security functions are compromised. This makes it an ideal foundation for a role-playing exercise focused on major incident response under adverse timing.
