administrative vulnerability