An organisation has risks from all these as:

Attacks: attacks in the form of virus, worms, trojan etc can corrupt the system infrastructure or the data. It can hijack your system and can steal the data. It can ask for ransom in return. It can make changes to the data which can cause losses.

Vulnerabilities: system is vulnerable to attacks means there are some loopholes in the system or infrastructure that can cause attacks or data thefts.

Economic losses: Can steal data and can corrupt it and in return can ask for ransom. Sometimes can make changes specially in financial data which can result into big losses.

Phishing: Can take data inputs on a wrong websites, filling forms etc

Spam: spam mails can contain virus codes or executables. It can corrupt the disk space as well.