This is a vulnerability, the company is vulnerable to virus attacks. v The threat is that a virus will show up in the environment and disrupt productivity. v The likelihood of a virus showing up in the environment and causing damage is the risk. v If a virus infiltrates the company's environment, then a vulnerability has been exploited and the company is exposed to loss. v The countermeasures in this situation are to update the signatures and install the antivirus software on all computers.