organizational vulnerabilities