How can one distinguish between an organizational weakness and a threat to the organization?

How can one distinguish between an organizational weakness and a threat to the organization?