Vulnerability
A vulnerability is a weakness in systems, processes, or components that can be exploited by threat actors. It covers causes, attack vectors and potential impacts on confidentiality, integrity, or availability. The concept supports identification, assessment and prioritization of security gaps and appropriate mitigations.
Use this profile to understand the building block briefly, place it in the model, and switch to the 360° assessment when needed.
Theoretical construct: explains a term, principle, or mental model.
What you need to understand to reason about a domain.
Why is this building block relevant?
- A vulnerability is an exploitable security weakness in systems, applications, or processes.
- It describes cause, attack vector and potential impact, and forms the basis for identification, prioritization and remediation.
Position in the model
Where this building block is located in the topic model.
No structure path available.
Connections
These building blocks help you place this topic: what it strengthens, what it influences, and which technologies or methods connect to it.
Additional classification
This classification shows where the building block typically matters, how demanding it is, and what kind of impact it has in the model.
The level within the organization (enterprise, domain, team) at which the AssetBlock is applied.
Organizational maturity indicates at which level (enterprise, domain, team) the AssetBlock can be applied most effectively.
The impact area indicates which domains (technical, business, organizational) are affected by introducing and using the AssetBlock.
Decision type describes which kinds of decisions (design, architectural, organizational, technical) are affected by applying the AssetBlock.
The phase in the value stream (discovery, build, run, iterate) in which the AssetBlock is primarily used.
Complexity describes the level of difficulty in implementing and using the AssetBlock. It considers factors such as the number of involved components, their interactions, and required skills.
Maturity describes how established, stable, and practice-proven an AssetBlock is in real-world usage. It considers market adoption, experience, and available best practices.
Cognitive load indicates how much mental effort and knowledge is required to effectively understand and apply the AssetBlock. It considers conceptual complexity, required expertise depth, and learning curve.