During a disaster recovery planning session, a security administrator has been tasked with determining which threats and vulnerabilities pose a risk to the orga...