an exploitable capability or an exploitable security weakness or deficiency at a facility of security interest.  Exploitable capabilities or weaknesses are those inherent in the design (or layout) of the facility and its protection, or those existing because of the failure to meet (or maintain) prescribed security standards when evaluated against requirements for defined threats.  If the vulnerability were detected and exploited by an adversary, then it would reasonably be expected to result in a successful attack causing damage to the facility (Garcia 303).