Researching potential threats, vulnerabilities, and control techniques and communicating this information to others in the organization.
Potential threats have to be researched.
How many of those opining solemnly on the Indonesian financial crisis this past week know (or care) squat about Indonesian finance?