Threats and measures in an organization