Arrange the stages of a security incident in chronological order, from the presence of a flaw to its active execution.

### The order 1. **A vulnerability exists in the system**: The weakness is the condition that may be misused. 2. **A threat presents potential for harm**: A threat represents a possible source or likelihood of harmful action. 3. **An exploit method can take advantage of the weakness**: The exploit is the method that uses the vulnerability. 4. **An attack takes place against the system**: The attack is the action taken against the target. ### The concept These terms are related, but they do not always occur as a simple timed sequence. The ordering is a learning aid showing how a weakness, potential harm, a method, and action differ. A vulnerability can exist without an attack, and a threat can exist without a successful exploit. ### Watch out Do not assume every vulnerability has already been exploited. The terms describe distinct conditions and actions.