Which of the following describes threat shifting?

$1.$

Threat shifting is any circumstance or event with the potential to adversely impact organizational operations and assets, individuals, other organizations, or the Nation through an information system via unauthorized access, destruction, disclosure, or modification of information, and$/$or denial of service.

$2.$

Threat shifting is the response of adversaries to perceived safeguards and$/$or countermeasures $($i$.$e$.,$ security controls$),$ in which adversaries change some characteristic of their intent$/$targeting in order to avoid and$/$or overcome those safeguards$/$countermeasures$.$

$3.$

Threat shifting is a weakness in an information system, system security procedures, internal controls, or implementation that could be exploited by a threat source.

$4.$

Threat shifting is a condition that exists within an organization, a mission or business process, enterprise architecture, information system, or environment of operation, which affects $($i$.$e$.,$ increases or decreases$)$ the likelihood that threat events, once initiated, result in adverse impacts to organizational operations and assets, individuals, other organizations, or the Nation.