Threats would be the methods, methods and methods used by danger actors that have the potential to induce damage to an organization's assets. To help you determine prospective threats to every asset, use a risk library like the Mitre ATT&CK Know-how Foundation and sources in the