This document defines the grounding logics of the solution developed by Hermeneut with regards to the most relevant vulnerabilities and the corresponding tangible and intangible assets at risk. It details the concepts and the theoretical assumptions and taxonomies used by the project.