Vulnerability analysis aims to:

Vulnerability analysis aims to:

• A. Eliminate operational risk entirely
• B. Identify and quantify vulnerabilities
• C. Replace risk with insurance
• D. Focus solely on physical security

Answer: (B)

Vulnerability analysis is about discovering weaknesses in assets, processes, and environments and assessing how likely they are to be exploited and what impact they could have. By identifying these vulnerabilities and measuring their potential severity, you can prioritize which gaps to close and allocate resources for mitigation. It isn't about eliminating operational risk completely—some level of risk remains in complex systems—and it's not about transferring risk to insurance. It's also not limited to physical security; weaknesses can lie in procedures, personnel, technology, or the integration of controls. The goal is to identify and quantify vulnerabilities so you can make informed risk-reduction decisions.

Vulnerability analysis is about discovering weaknesses in assets, processes, and environments and assessing how likely they are to be exploited and what impact they could have. By identifying these vulnerabilities and measuring their potential severity, you can prioritize which gaps to close and allocate resources for mitigation. It isn't about eliminating operational risk completely—some level of risk remains in complex systems—and it's not about transferring risk to insurance. It's also not limited to physical security; weaknesses can lie in procedures, personnel, technology, or the integration of controls. The goal is to identify and quantify vulnerabilities so you can make informed risk-reduction decisions.