The terms “threat” and “vulnerability” directly associate with one another. A threat is the prospect of damage being done and in the context this includes a possible hack, or cyber attack. Vulnerabilities are the means by which these threats become attacks and deal damage.
It only comes from experience and applying these methods can we determine the best preventative actions to take against them in case they were ever used against a system maliciously.