Vulnerability scan vs. penetration test vs. risk analysis: What’s the difference?

The three different processes are known as a vulnerability assessment, penetration test and a risk analysis. Knowing the difference is critical when hiring an outside firm to test the security of your infrastructure or a particular component of your network. A risk analysis doesn’t require any scanning tools or applications its a discipline that analyzes a specific vulnerability (such as a line item from a penetration test) and attempts to ascertain the risk including financial, reputational, business continuity, regulatory and others to the company.”]

Source: https://www.csoonline.com/article/2921148/whats-the-difference-between-a-vulnerability-scan-penetration-test-and-a-risk-analysis.html