external threat actors