-snip-
If you don't have a valid true.
Better to not assume, the DDOS attack is by some other business rival. Just always think, is because some body and the DDOS attack is not always bad. But it's also, to test and check how the security is going and how the team should handle.
If not like this, then they're not gonna to expand into a better security.