Question

what is vulnerability and risk

Answer 1

$<b > heyyya$


vulnerability is a weakness or gap in our protection efforts. Risk – The potential for loss, damage or destruction of an asset as a result of a threat exploiting a vulnerability. Risk is the intersection of assets, threats, and vulnerabilities

Answer 2

One of the best answers for this question is as follows - “A threat is from an attacker that will use a vulnerability that was not mitigated because someone forgot to identify it as a risk.”

Threat – Anything that can exploit a vulnerability, intentionally or accidentally, and obtain, damage, or destroy an asset.

Vulnerability – Weaknesses or gaps in a security program that can be exploited by threats to gain unauthorized access to an asset.

Risk – The potential for loss, damage or destruction of an asset as a result of a threat exploiting a vulnerability.