What may be an organization's greatest threat?

• A. Natural disasters
• B. Theft and fraud
• C. Cyber attacks
• D. Terrorism

Answer: (B)

The main idea here is how threats to an organization’s assets arise and which type tends to cause the most steady, financial impact. Theft and fraud are often the greatest threat because they directly target the organization’s assets—cash, inventory, accounts receivable, and even sensitive information—through deliberate wrongdoing. They can be perpetrated by insiders or by outsiders who gain access, and they frequently fly under the radar, accumulating losses over time before controls catch them. The financial impact can be large, ongoing, and partly hidden, and it also erodes trust, increases costs (like investigations and insurance), and can trigger regulatory or legal consequences.

Natural disasters, while potentially devastating, are event-based and typically mitigated with preparedness, redundancy, and insurance, so their day-to-day frequency and detectability differ from ongoing fraud losses. Cyber attacks are highly serious and can cause major damage, but they often focus on data breach, disruption, or manipulation rather than direct asset leakage through theft; many organizations already invest heavily in cyber security, making fraud an equally or more persistent drain in many contexts. Terrorism is a profound concern in certain environments, but it is less frequent as a day-to-day threat to most organizations and is addressed through broader security and resilience planning.