Long ago I worked at Autodesk, and they would regularly publish threat reports on their intranet, mainly covering news from their competitors, identifying emerging or disruptive technologies, and economic threats. No doubt threat management also included morale, stagnation, theft and subterfuge, external attacks on IT infrastructure, legal and intellectual property issues, etc.