A vulnerability test is a type of security assessment that identifies and analyzes the security weaknesses in an information system. The purpose of a vulnerability test is to evaluate the effectiveness of security controls and to provide recommendations for improvement. A vulnerability test does not exploit the security weaknesses or measure the system performance. A vulnerability test is also different from a penetration test, which is a type of security assessment that attempts to exploit the security weaknesses and gain unauthorized access to the system. A vulnerability test is also not related to disaster recovery planning, which is a process of preparing for and recovering from a disruptive event that affects the availability of an information system.