What is an IT security vulnerability?
A vulnerability can come from software, configuration, excessive rights or an insufficiently framed process. The key is to distinguish the weakness, the threat that could exploit it and the incident that could result.