olemus
(a) nõrkuste määratlemine, tuvastus, liigitamine ja prioriteetimine

ISO 22300:
protsess, miilega tuvastatakse ja kvantiteeritakse miski, mis tekitab kaitsetuse mingi riskiallika eest ja võib viia mingi tagajärjeni
= process of identifying and quantifying something that creates susceptibility to a source of risk that can lead to a consequence

(b) = vulnerability assessment

ülevaateid
https://en.wikipedia.org/wiki/Vulnerability_assessment

https://slideplayer.com/slide/6588305/

http://www.primatech.com/images/docs/paper_comprehensive_cyber_security_vulnerability_analysis_for_manufacturing_plants.pdf

https://www.acs.org/content/dam/acsorg/about/governance/committees/chemicalsafety/publications/security-vulnerability-checklist.pdf

https://www.mdpi.com/1999-5903/12/2/27/pdf

http://www.primatech.com/images/docs/paper_an_asset_based_approach_for_industrial_cyber_security_vulnerability_analysis.pdf

https://www.witpress.com/Secure/elibrary/papers/9781845645625/9781845645625002FU1.pdf