Thanks very much for pointing out the broken link for the SANS paper. The correct link is here: https://www.sans.org/reading-room/whitepapers/incident/psychology-hacker-psychological-incident-handling-36077