A threat is a potential cause of an unwanted incident, which may result in harm to a system or organization (ISO/IEC 27000). Threats may be triggered by human beings (intentionally or unintentionally) or may be caused by environmental factors. They may include things like theft (e.g. information theft), eavesdropping, information leakage, earthquakes and flooding.
