Vulnerability is a weakness which allows an attacker to reduce a system’s information assurance. Vulnerability is the intersection of three elements: a system susceptibility or flaw, access to the flaw, and capability to exploit the flaw. A vulnerability assessment is the process of identifying, quantifying, and prioritizing the vulnerabilities in a system.