132-45D Risk and Vulnerability Assessment [nine] identifies, quantifies, and prioritizes the risks and vulnerabilities in a system. A risk assessment identifies identified threats and threat actors as well as the probability that these things will bring about publicity or loss. In the event your Business is pursuing a security audit https://7lrc.com/vulnerability-assessment-vs-penetration-testing-understanding-the-key-differences/