Researching potential threats , vulnerabilities , and control techniques and communicating this information to others in the organization .
Potential threats have to be researched because they are vital information .