Security Vulnerability Analysis (SVA)

The process of determining the likelihood of an adversary successfully exploiting a weakness and the resulting degree of damage or impact. A SVA is not a quantitative risk analysis, but is performed qualitatively using a structured and repeatable method and the best judgment of safety, security, and transportation personnel. A qualitative determination of risk is the desired outcome of a SVA in order to provide the basis for ranking the security-related risks and thus to establish priorities for the application of countermeasures.