[Introduction to Incident Handling and Response] Otis is an incident handler working in an organization called Delmont. Recently, the organization…

The scenario describes the theft of proprietary information which was then passed to business competitors. This act of stealing confidential data to gain a competitive advantage is specifically defined as industrial or corporate espionage. While the incident likely involved unauthorized access and network abuse to execute the attack, "Espionage" is the most precise classification that describes the motive, the action of stealing secrets, and the intended outcome of harming the organization's business standing.

A. Network and resource abuses: This is a broad category that describes a method of attack, not the specific goal of stealing proprietary information for a competitor.
C. Email-based abuse: This describes a potential delivery vector for an attack, such as phishing, but it does not define the nature or objective of the incident itself.
D. Unauthorized access: This is a component of the attack chain. The perpetrator gained unauthorized access to steal the data, but this term alone does not capture the full context of espionage.

1. Cherdantseva

Y.

Burnap

P.

Blyth

A.

Eden

P.

Jones

K.

Soulsby

H.

& Stoddart

K. (2016). A review of cyber security risk assessment methods. In A Review of Cyber Security Risk Assessment Methods (pp. 1-30). Cardiff University

School of Computer Science & Informatics. In section 2.2

"Threats

" the paper discusses threat agents and their motivations

including competitors engaging in industrial espionage to steal trade secrets. This aligns directly with the scenario.

2. Tounsi

W.

& Rais

H. (2018). A survey on technical threat intelligence in the age of sophisticated cyber attacks. Computers & Security

72

212-233. https://doi.org/10.1016/j.cose.2017.09.001. The paper discusses various cyber attack motivations

explicitly mentioning "espionage" as a primary driver where attackers

including corporate spies

aim to steal sensitive information such as intellectual property for competitive gain (Section 2.1

Table 1).

3. National Institute of Standards and Technology (NIST). (2012). Computer Security Incident Handling Guide (Special Publication 800-61 Rev. 2). https://doi.org/10.6028/NIST.SP.800-61r2. While NIST uses broader categories

the scenario falls under "Improper Usage" (Section 2.3.1)

which includes "using systems for commercial or financial gain." Espionage is a highly specific and severe form of this category

focused on theft of intellectual property.