Vulnerability Assessment according to ISO/IEC 27001, with a focus on systematic identification of technical vulnerabilities in information systems and assessment of residual risk against Annex A controls. Covers scanning methodologies, weakness classification according to recognized frameworks, and mapping to security controls required for ISMS certification.