A vulnerability is a weakness that a threat could exploit. It may be technical, such as missing patches, default credentials or misconfigured cloud storage, or non-technical, such as an untrained team, a weak process or a single person holding critical knowledge. Risk exists where a relevant threat meets a vulnerability in an asset that matters. Vulnerability analysis finds these weaknesses so the risk can be assessed and treated, and it is one of the main inputs to the risk register.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.