Vulnerability assessments define, identify and classify vulnerabilities in computers, networks and communications infrastructure with scanners and tools that search for known vulnerabilities and classes and for conformance with approved configurations, at a frequency set by the risk management process, continuously or periodically, internally or externally, with the security of scanning credentials a prime consideration where host agents with high-level access are used.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.