Identify the primary threat agents to your business. Which persons or entities stand to profit from attacking your software systems and what types of attacks would be most beneficial to them? What information could they obtain from your software systems or release publicly to cause damage to the organization? Are there any policies or mitigation tactics in place to prevent these types of attacks at present?