Culture I think. Not all organisations are exposed to cyber- related issues. It depends on the nature of their activities. Third party issue can be dealt with in a way; but no organisation is immuned from cultural interference.
"cultural differences in business can bring complications as well. Various cultural differences can interfere with productivity or cause conflict among employees. Stereotypes and ignorance about different traditions and mannerisms can lead to disruptions and the inability of some employees to work effectively as a team or to handle business dealings with potential customers in other countries." Copied
Lack of ability within the organization to integrate/adapt/accept culture, cyber and third parties is perhaps the biggest risk. In a multicultural social milleu, organisational leadership needs skills to harmonise plurality without compromising organisational goals. Also the ability of organization to ward of cyber risks and optimise it's advantages - is a technological skill.
I think if organization itself wants to convert opportunities into threats then nobody can save the organization. So i would say that if the organization and the people of an establishment themselves are sincere then other types of risks can be overcome.
All of them, culture, cyber and third party contribute to risk in organization. One cannot tell which of the above contributes more risk. In computer development organizations, cyber is high risk, all of us staying at one place, culture be the risk and when selling or buying, intervening third party becomes huge risk.