How can one distinguish between an organizational weakness and a threat to the organization? How can one distinguish between an organizational weakness and a threat to the organization?