Infrastructure always has a higher vulnerability risk than the other OSI layer is where the majority of the high and critical risk exposure resides. Organizations do all they can to protect their critical cyber assets, but they don’t always systematically test their defences.