If you are an information security professional within your company, you will be asked to understand the threats, vulnerabilities, and risks that may…

If you are an information security professional within your company, you will be asked to understand the threats, vulnerabilities, and risks that may impact the company. If your boss asks you which is more important to focus on, threats or vulnerabilities, how would you respond?
Justify your response.