According to ISO/IEC 27000, which of the following is the definition of a vulnerability?
- A weakness of an asset or group of assets that can be exploited by one or more threats.
- The impact of a cyber attack on an asset or group of assets.
- The threat that an asset or group of assets may be damaged by an exploit.
- The damage that has been caused by a weakness iin a system.
Answer(s): A
Explanation:
Vulnerability
A vulnerability is a weakness of an asset or control that could potentially be exploited by one or more threats. An asset is any tangible or intangible thing or characteristic that has value to an organization, a control is any administrative, managerial, technical, or legal method that can be used to modify or manage risk, and a threat is any potential event that could harm an organization or system.
https://www.praxiom.com/iso-27000-definitions.htm