During a risk assessment, a critical vulnerability was discussed. It was determined if the vulnerability was not patched and someone exploited it, ultimately the company could go out of business. This is an example of: