There are a lot of vulnerabilities that a company can face and the threats could all come from different directions. The more obvious threats would be attackers that will try to gain access in a variety of ways. One of the most common is phishing emails that try to trick employees to give up credentials or click on attachments that could be malware or spyware. Companies should train their employees to look out for suspicious emails and not click on random attachments in said emails to avoid this problem. A threat on the more technological side is outdated systems where there are vulnerabilities that attacker could exploit. Companies should make sure that their security and system are both up to date to help prevent these attacks that could leak sensitive data.