A quick reminder : Don't stress on both threat and vulnerability
Groundblue
Threat and vulnerability are two tightly coupled aspects. There is no point to focus on a vulnerability if the threat doesn’t exist, similarly you can’t stress on a threat, if your asset is not concerned with the vulnerability (or weakness). The question one should ask is “What are the risks...