A Threat is a person or organization that seeks to obtain or alter data or other IS assets illegally, without the owners' permission. It is an unauthorized access; Unauthorized use of assets; Unauthorized Disclosure of sensitive information; Unauthorized changes to an asset; Deny access – includes destruction, theft of a non data asset, etc.