In the assessment definition, a _____ is a weakness that may be exploited or contribute to harm.

### Why this is right A vulnerability is a weakness that may be exploited or contribute to harm. Identifying vulnerabilities is one of the purposes named in the course definition of a cybersecurity assessment. ### The concept A vulnerability describes a weakness, not the actor or event that might take advantage of it. A threat is a potential source of harm, while risk is the possibility of harm in the circumstances being considered. Assessment brings these concepts together and may lead to recommended controls. The course material does not provide a detailed technical taxonomy of vulnerabilities, so this plain-language distinction is the appropriate level of detail. ### Terms - **Vulnerability**: A weakness that may be exploited or contribute to harm. - **Threat**: A potential source or cause of harm. - **Risk**: The possibility of harm associated with assets and security conditions. ### Remember A vulnerability is the weakness, not the possible attacker or the resulting harm.