In order to properly defend, you must know your enemy. What actions or individuals out there scare you? What can show up in a moment's notice and wreck havoc?
There are several ways to group threats and in real life companies spend months just discussing how best to group like-items and look for scalable responses. For this project, however, you will lump all threats into one of the three following groups:
Man-made threats.What groups of individuals might want to harm the company? What about the stability of the local government? Fires can be caused by Mother Nature or an arsonist.
Natural.Mother Nature does not care about profit or even safety. Are there region specific threats to company headquarters?
Technical.Systems fail. Power can be lost. Vendors go out of business.