Analyzing the 2025 Marks & Spencer cyberattack using the Diamond Model, mapping identity-based intrusion techniques to MITRE ATT&CK and aligning remediation strategies with NIST controls.