Vulnerability Risk Assessment Factors:$1$ Is this vulnerability a true or false positive?$2$ Could someone directly exploit this vulnerability from the Internet?$3$ How difficult is it to exploit this vulnerability?$4$ Is there known, published exploit code for this vulnerability?$5$ What would be the impact to the business if this vulnerability were exploited?$6$ Are there any other security controls in place that reduce the likelihood and$/$or impact of this vulnerability being exploited?$7$ How old is the vulnerability$/$how long has it been on the network?