> Cyberattacked by whom? Whoever is politically convenient > How? Probably social engineering but possibly poor security practices > What vulnerabilities al

> Cyberattacked by whom? Whoever is politically convenient > How? Probably social engineering but possibly poor security practices > What vulnerabilities allowed the intrusion Probably poor security training on employees and poor safeguards, but possibly also poor security practices in software engineering > what organizational processes created those vulnerabilities? Leadership with poor priorities and shortsightedness for the sake of short-term profit