Identify and Assess Vulnerabilities and Threats Across Systems and Networks

Learning Objectives

At the end of this topic, you will be able to:

1. Explain the concepts of vulnerability, threat, and risk, and how they relate to one another.
2. Classify vulnerabilities using recognised frameworks (CVE, CVSS, OWASP Top 10).
3. Identify and categorise common threat types and threat actors.
4. Use vulnerability scanning tools to detect weaknesses in systems and networks.
5. Assess and prioritise risk using CVSS scoring and map threats to MITRE ATT&CK.
6. Document and report assessment findings clearly to stakeholders.