Report 3: Vulnerability, Capability, Opportunity