It is vital to do threat assessment in order to manage the risk. There are classifications of threat such as the environment,man made as well as internal and external risks. There are also categories such as compliance, financial, operational yet the answer on the question is strategy. Examples are theft of intellectual property, loss of an account and not grabbing new opportunities.