thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Foundational

Vulnerability

A weakness in an asset, control, or process that a threat could exploit.

Definition

Vulnerabilities can be technical (unpatched software, misconfiguration), administrative (missing policy, poor training), or physical (unlocked doors). Vulnerability management identifies, prioritizes, and remediates weaknesses. In risk analysis, vulnerability influences the likelihood that a threat event results in loss.

Example

A missing multifactor authentication requirement on VPN access is a vulnerability.

Exam tip

Distinguish vulnerability (weakness) from exposure (being subject to loss) and threat (potential cause).

Don't confuse it with

Related terms