threats and vulnerabilities (1)