threat and risk concepts update