Vulnerability analysis is the process of:

• A. Implementing safeguards
• B. Monitoring risk exposures
• C. Estimating the monetary impact of vulnerabilities
• D. Identifying and quantifying vulnerabilities

Answer: (D)

Vulnerability analysis focuses on discovering weaknesses and assessing how serious they are. It involves identifying where vulnerabilities exist and quantifying their significance—typically in terms of how likely they are to be exploited and what impact that exploitation could have on assets, operations, or safety. This prioritizes which vulnerabilities to address first by their potential risk. The other activities shift into different parts of the risk management process: implementing safeguards is about applying controls to fix weaknesses; monitoring risk exposures is an ongoing check of risk levels over time; estimating monetary impact is part of translating risk into cost, which goes beyond simply identifying and quantifying vulnerabilities.