2. (5 points) In what ways were the company's operating procedures deficient in responding to this attack? In what ways were they adequate? What additional procedures might have been in

place to better handle the attack?