Threats presents a unique challenge to information security and must be handled with specific controls that directly address the particular threat and the threat agent's attack strategy