Which of the following is a threat source type?

• A. Adversarial
• B. Administrative
• C. Structural or Environmental
• D. Physical

Answer: (C)

Threat sources are origins of threats that can exploit vulnerabilities and affect assets. Structural or environmental threats come from the built environment or surrounding conditions—things like floods, fires, power outages, earthquakes, or structural failures. These threats originate in the physical environment and infrastructure rather than from a person or a policy lapse, so they’re categorized as a distinct source of threat in risk assessments. Adversarial refers to intentional actors; administrative concerns involve governance or process weaknesses; physical describes direct damage or harm to facilities. The structural or environmental category best captures threats that arise from the environment and structure itself.