threats and vulnerabilities