A vulnerability is the state of being unprotected from the likelihood of being attacked, physically or emotionally.

By understanding the adversary, their intent, and their capability, an organization can then focus on identifying the potential vulnerabilities that exist in the enterprise.