A vulnerability is a weakness or gap in a system’s security controls that a bad actor can exploit. Vulnerabilities help enable attacks against organizations of any size and form part of the wider threat landscape alongside malware and bad actors. section 1.4
Assess vulnerabilities as part of a broader security effort:
- Consider both external cyber criminals and malicious insiders as potential sources of exploitation. section 1.4
- Study how bad actors pursue goals through tactics, techniques, and procedures. section 1.4
- Use awareness of evolving threats to prevent common vulnerabilities and reduce the likelihood of compromise. section 1.4















