Anything that might exploit a vulnerability. Any potential cause of an incident can be considered to be a threat. For example a fire is a threat that could exploit the vulnerability of flammable floor coverings. This term is commonly used in Information Security Management and IT Service Continuity Management, but also applies to other areas such as Problem and Availability Management. ¹

^{1 -} ITIL® V3 Glossary