-snip-
If you don't have a valid true.
Better to not assume, the DDOS attack is by some other business rival. Just always think, is because some body and the DDOS attack is not always bad. But it's also, to test and check how the security is going and how the team should handle.
If not like this, then they're not gonna to expand into a better security.
I don't think that's an assumption.
Still, there's some truth to it because if you think about it, if a website can grow rapidly in a short time, a website that already exists will think about hampering its development.
Such things exist in all businesses and the actual attacker could hire a person or group of groups to carry out the attack.
That's why I say that a business website must have a qualified security team to be able to handle DDOS problems.