Glossary: Governance, Risk and Compliance

vulnerability

Also written: weakness

A weakness a threat can use, such as email with no second factor. It is one of the three things a risk needs.