threat/vulnerability model

A listing of AV services and devices that may contain vulnerabilities and therefore could be threatened with exploitation. The assessment should also account for threat agents who may attempt to compromise these systems.