What is the difference between a vulnerability assessment and penetration testing?

“A vulnerability assessment identifies and ranks known weaknesses using automated scanning across a wide surface. A penetration test is human-led and proves exploitability and business impact on a narrower scope. Regulated programmes typically run continuous assessment plus an annual test.”