Vulnerability
A weakness of a service and its constituent CIs (assets) which could be exploited by threats.