Cybersecurity Glossary
Vulnerability
A weakness that could be used to compromise a system.
What Vulnerability means
A vulnerability may be a software defect, a configuration mistake or a process gap. Published software flaws receive a CVE identifier and a severity score, but the score describes the flaw in general, not its importance to you. A high severity flaw in software you do not expose matters less than a moderate one on your login page.
Why Vulnerability matters for small businesses and nonprofits
There will always be more vulnerabilities than time. Prioritising by exposure and by evidence of active exploitation is what turns an unmanageable list into a week of useful work.
What to do about Vulnerability
- Prioritise by what is internet facing and by what is being exploited in the wild
- Track your fix times, because speed matters more than completeness
- Record accepted risks with a reason and a review date
Not sure where you stand on this?
We review your current setup against the basics, tell you plainly what is covered and what is not, and give you a ranked list with effort and cost. No jargon and no scare tactics.