Your company has hired a risk management firm to evaluate the organizations overall health and risks. One area that is quickly identified is a small warehouse in a heavily populated area that holds valuable assets. The warehouse has no perimeter defenses. This lack of protection would be characterized as a ________.

A.
Threat

B.
Acceptable business practice as physical controls are not critical

C.
Vulnerability

D.
Exposure factor

Explanation:
The lack of physical controls in an area where crime is possible is a definite
vulnerability for the company to consider. The threat in this scenario would be
potential intruders who could exploit this vulnerability.