THE DUTY OF THREAT ADMINISTRATION DEVICES IN AIDING ORGANISATIONS RECOGNIZE AND MINIMIZE RISKS