1.Potential act of Human Error
Ans: An organisation can face information security breach from various sources. Employees and stakeholders are the threat agents closest to the organisational data. Employees uses data especially who are in an important role they can access all kind of data. Any mistake happens from employees can take the organisation losing its confidentiality, integrity. Now this kind of mistake happens sometimes intuitionally or accidentally. When an employee leaves classified data in unprotected manners can be treated as potential act of human error and attacker can take the privilege to breach the information security.

According to Whitman, M., & Mattord, H., “This is because employee mistakes can easily lead to the following: revelation of classified data, entry of erroneous data, accidental deletion or modification of data, storage of data in unprotected areas, and failure to protect information.”

Example: In April 1997, the core of the Internet suffered a disaster. Internet service providers lost connectivity with other ISPs due to an error in a routine Internet router table update process. The resulting outage effectively shut down a major portion of the Internet for at least twenty minutes. It has been estimated that about 45percent of Internet users were affected.
(Whitman, M. E., & Mattord, H.J. 2012, p59).

2. Compromises to intellectual property
Ans: According to Whitman, M., & Mattord, H., “Intellectual property is defined as the ownership of ideas and control over the tangible or virtual representation of those ideas. Use of another person’s intellectual property may or may not involve royalty payments or permission, but should always include proper credit to the source. Intellectual property can be trade secrets, copyrights, trademarks, and patents.”
An organisation always takes permission from other organisation for using any kind of information or other materials. Without consent if somebody uses others property can create legal issues and mostly it happens in the software privacy. Lot of organisation do not purchase software according to the licence agreement.
For example: In an organisation a software can be used for certain number of computers and using more than that numbers can be compromising the intellectual property right of the software. An organisation can face major legal problem if it occurs anytime.

3. Deliberate act of theft
Ans: Deliberate act of theft means stealing another property without consent. Electronic theft cannot be controlled in many ways. For example: In an organisation if somebody want to steal valuable information sometime it can be prevented and sometime not. A lot of organization has information hole which can damage organisation privacy and cost millions. So it is very important to have organisation security in right hand and monitor employee, server data who is accessing what kind of information. A highly protected organisation always gives restricted access to the users.

4. Deliberate software attacks
ANS: Deliberate software attack uses unauthorised software to attack the system. This software is called malicious software. It can damage the computer system. The most common type of software attacks are virus or worm attack, Trojan horses, back doors and logic bomb.
Example: Prominent among the history of notable incidences of malicious code are the denial-of-service attacks conducted by Mafiaboy (mentioned earlier) on Amazon.com, CNN.com, ETrade.com, ebay.com, Yahoo.com, Excite.com, and Dell.com. These software-based attacks lasted approximately four hours, and are reported to have resulted in millions of dollars in lost revenue.9 The British Internet service provider Cloud nine is believed to be the first business “hacked out of existence” in a denial-of-service attack in January 2002. This attack was similar to denial-of-service attacks launched by Mafia boy in February 2000. (Whitman, M. E., & Mattord, H.J. 2012, p46).

5.Forces of nature
Ans: Forces of nature can occur anytime and destroy the computer system as well as security. These threats are such as fires, floods, earthquakes, and lightning. Forces of nature cannot be controlled but an organisation can take all kind of pre caution. Fire can damage computing equipment in the building and information security can be compromised. For example in the data centre server room has to be very cool and very equipped if it catch fire. Flood can affect the system operation which can cause severe damage to organization. Lightning, Hurricane, Tornado, Electrostatic Discharge can make severe damage to organisation system. Forces of nature can disrupt lives of individuals and storage, transmission and use of the information.

6. Potential deviations in quality of service from service providers
Ans: Information security is an important aspect of an organisation. An organisation has to consider lot of factors to have successful operation and best services to its users. If service providers don’t provide up to mark services according to the requirement can cause service related issues. It can lead an organisation to face huge loss and it can face legal issues.

According to Whitman, M., & Mattord, H., “Deviations in quality of service can result from incidents such as a backhoe taking out a fibre-optic link for an ISP. The backup provider may be online and in service, but may be able to supply only a fraction of the bandwidth the organization needs for full service.”

Power grids, telecom networks, parts supplier, service vendors are the part of the successful system. But from these services an organisation can be affected many ways. For example A data centre is highly dependent on right amount bandwidth from the service provider. Now if the vendor provides less bandwidth, it can cause serious problem for protecting data as well as organisation reputation.

7. Technical hardware failure
Ans: Technical hardware failure occurs due to manufacturer’s faulty equipment. This can affect the system to perform outside of expected parameters, resulting in unreliable service or lack of availability. There are many types of hardware problems that can cause security at the stake. Memory errors, System timing problems, resource conflict, power loss are common technical hardware problem.

Example: In September 2010, Virgin Blue's airline's check-in and online booking systems went down. Virgin Blue suffered a hardware failure, on September 26, and subsequent outage of the airline's internet booking, reservations, check-in and boarding systems. The outage severely interrupted the Virgin Blue business for a period of 11 days, affecting around 50,000 passengers and 400 flights, and was restored to normal on October 6 and Virgin lost $20M( Example retrieved from http://www.evolven.com/blog/downtime-outages-and-failures-understanding-their-true-costs.html at 13,2012).

Reference

Whitman, M. E., & Mattord, H.J. (2012). Principles of Information Security (4th ed.). USA: Course Technology, Cengage Learning.
System Outage Nightmare Example: Virgin Blue's Reservation Desk, Retrieved December 12, 2012 from
http://www.evolven.com/blog/downtime-outages-and-failures-understanding-their-true-costs.html