It refers to factors that have the potential to harm an organization or business