A vulnerability analysis is a process to help prioritize the potential risk to your organization. The analysis has two basic things to determine.
1. The likelihood that the identified risk will occur.
-and-
2. The significance of the impact if the risk should occur.