Vulnerability assessments (identify security weaknesses)