A vulnerability assessment is a process that identifies and quantifies vulnerabilities in a system. It is the most effective process to determine the relevance of threats for risk scenarios as it helps in identifying potential security threats and vulnerabilities, quantifying the seriousness of each, and prioritizing techniques to mitigate attack and protect IT resources1.
References
2Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management
3Threat Modeling Process | OWASP Foundation
1Threat modeling explained: A process for anticipating cyber attacks
4Hazard Identification and Risk Assessment: A Guide - SafetyCulture
5How to Write Strong Risk Scenarios and Statements - ISACA