olemus
(a) nõrkuste määratlemine, tuvastus, liigitamine ja prioriteetimine
ISO 22300:
protsess, miilega tuvastatakse ja kvantiteeritakse miski, mis tekitab kaitsetuse mingi riskiallika eest ja võib viia mingi tagajärjeni
= process of identifying and quantifying something that creates susceptibility to a source of risk that can lead to a consequence
(b) = vulnerability assessment

ülevaateid
https://en.wikipedia.org/wiki/Vulnerability_assessment
http://www.primatech.com/images/docs/paper_comprehensive_cyber_security_vulnerability_analysis_for_manufacturing_plants.pdf
https://www.acs.org/content/dam/acsorg/about/governance/committees/chemicalsafety/publications/security-vulnerability-checklist.pdf
https://www.mdpi.com/1999-5903/12/2/27/pdf
http://www.primatech.com/images/docs/paper_an_asset_based_approach_for_industrial_cyber_security_vulnerability_analysis.pdf
https://securityanddefence.pl/Vulnerability-analysis-in-critical-infrastructures-A-methodology,108665,0,2.html
https://rib.msb.se/filer/pdf/26267.pdf