The term vulnerability refers to:

The term vulnerability refers to:

• A. The effectiveness of an existing control
• B. The probability of a successful attack
• C. Intrinsic properties that create susceptibility to risk
• D. Financial costs of risk

Answer: (C)

Vulnerability is the weakness that makes an asset or system susceptible to harm. It refers to intrinsic flaws or gaps that a threat could exploit to cause damage or loss. The best description is that vulnerabilities are the inherent properties that create susceptibility to risk because they are the the underlying reasons risk can materialize when a threat acts. For example, an unpatched software, weak passwords, or a door left unlocked are vulnerabilities: they represent weaknesses that can be leveraged by a threat to cause harm. The other ideas point to different parts of risk: the effectiveness of an existing control describes how well safeguards work; the probability of a successful attack describes likelihood rather than the underlying weakness; and the financial costs of risk describe impact or consequences, not the vulnerability itself.

Vulnerability is the weakness that makes an asset or system susceptible to harm. It refers to intrinsic flaws or gaps that a threat could exploit to cause damage or loss. The best description is that vulnerabilities are the inherent properties that create susceptibility to risk because they are the the underlying reasons risk can materialize when a threat acts.

For example, an unpatched software, weak passwords, or a door left unlocked are vulnerabilities: they represent weaknesses that can be leveraged by a threat to cause harm. The other ideas point to different parts of risk: the effectiveness of an existing control describes how well safeguards work; the probability of a successful attack describes likelihood rather than the underlying weakness; and the financial costs of risk describe impact or consequences, not the vulnerability itself.