The process of identifying, evaluating, treating, and reporting on security vulnerabilities in systems and the software that runs on them. vulnerability management (VM)