Standards such as ISO/IEC 27001 take into account potential threats to IT security goals such as confidentiality, availability, and integrity caused by, for example, information technology, physical, organizational, and personnel weak points. The associated catalogs of measures and hazards are the result of extensive organizational experience, which has been honed to produce the standard.