What is the main difference between a vulnerability and a threat in risk terminology?
-
A
A vulnerability is a malicious actor; a threat is a software flaw
-
B
A vulnerability is a weakness that can be exploited; a threat is a potential danger that could exploit it
-
C
A vulnerability quantifies financial loss; a threat describes the attack vector
-
D
A vulnerability is external; a threat is always internal