취약점평가, 위협평가 각각의 목적

The purpose of a VA is to improve security. 

The purpose of a TA is to help us decide (in conjunction with Risk Management) what and how much security we need.