Definition
Vulnerability Assessment is a process for identifying, analysing and evaluating Vulnerabilities in systems, applications or infrastructure to determine their Risk and the necessary remediation priorities.
Human Explanation
An organisation examines its environment to find weaknesses and decide which of them require attention first.
Why it Matters
Regular assessment allows exposure to be reduced before identified weaknesses are exploited.
Conceptual Boundary
Vulnerability Assessment does not normally attempt to exploit identified Vulnerabilities. Its purpose is to discover, analyse and prioritise them; Penetration Testing evaluates selected weaknesses through controlled exploitation.
Practical Perspective
Assessment findings create value when they enter an owned Vulnerability Management process connected to remediation and Patch Management.