What are the Information Security threats that most organisations face?

A threat is “a person or thing likely to cause damage”, but what does this mean in the context of information security?