A vulnerability assessment is an assessment: