HOW BUSINESSES MAKE USE OF THREAT MANAGEMENT TOOLS TO FIND AND DECREASE POTENTIAL THREATS