In an adversary-versus-intent Threat Matrix, what kinds of intent would a state-sponsored actor typically have, and how does that differ from a criminal actor's intent?

State-sponsored actors lean toward espionage, sabotage, and information manipulation; criminal actors lean toward disruption, system manipulation, and information theft (for money).

The split reflects motive. Nation-state actors pursue strategic goals — stealing secrets (espionage), degrading an adversary's capability (sabotage), or shaping narratives (information manipulation). Criminals pursue profit — disrupting operations to extort (ransomware), manipulating systems, and stealing information to sell. Knowing the actor's intent tells you what they will go after and how patient and well-resourced they are, which directly shapes the breach scenario and the controls you prioritize.