Vulnerability 001
Vulnerability 001 : (1) A physical feature or operational attribute that renders an entity open to exploitation or susceptible to organizational disruption from a given hazard. (Adapted from NIPP 2009). (2) Characteristic of design, location, security posture, operation, or any combination thereof, that renders an asset, system, network, or entity susceptible to disruption, destruction, or exploitation. In calculating risk of an intentional hazard, the common measurement of vulnerability is the likelihood that an attack is successful, given that it is attempted. (DHS Risk Lexicon 9/08)