Threats would be the practices, tactics and strategies used by menace actors which have the likely to induce harm to an organization's assets. That will help detect possible threats to every asset, make use of a threat library such as the Mitre ATT&CK Expertise Foundation and me