An easy target is an asset with more than five medium-risk vulnerabilities or one or more high-risk vulnerabilities.