Threat can be defined as anything which is danger to an organization's Asset. Threats can be physical threat of network based threats. An attacker may exploit poorly configured network infrastructure devices like a firewall, router network servers or switches. Default settings network infrastructure devices, loose access controls, applications and operating system without proper updates etc. are vulnerabilities and can be exploited by an attacker.