Vulnerability scanning/testing: A vulnerability scanner tool is used to scan a network or system
for a list of predefined vulnerabilities such as system misconfiguration, outdated software, or a
lack of patching. It is very important to understand the output from a vulnerability scan, they can
be 100's of pages for some systems, and how do the vulnerabilities map to Threats and Risks (Risk =
Threat x Vulnerability). When we understand the true Risk, we can then plan our mitigation.