### Question
How does CYBERSECURITY AND INFRASTRUCTURE SECURITY AGENCY define security vulnerability?


### Answer
Under *6 U.S.C. § 650*, **security vulnerability** is defined as:

> any attribute of hardware, software, process, or procedure that could enable or facilitate the defeat of a security control

#### Citation:
  - *6 U.S.C. § 650*
  - Heading: **CHAPTER 1-HOMELAND SECURITY ORGANIZATION > SUBCHAPTER XVIII-CYBERSECURITY AND INFRASTRUCTURE SECURITY AGENCY**

