Vulnerability assessment

A process to determine existing weaknesses or gaps in an information system’s protection efforts.