A potential weakness in an asset or its defensive control system(s) is known as _____.
a) vulnerability
b) exposure
c) threat
d) breach