Vulnerabilities are weaknesses or gaps within an organization which can threaten/compromise its assets (both tangible and intangible).