The Library's increasing use of third-party providers within its network was noted as a risk prior to the attack. The report suggests that the existing intrusion response processes were not adequate.