The invention relates to a system and method for monitoring a structural vulnerability not yet apparent as a defect. A type of vulnerability is identified from a grouping of elements and/or features of a structure and its systems, called findings, whose attributes meet a particular set of selection rules called relationship-association classifiers (RACs)—a series of one or more tests of relationships between attributes of findings, the series of tests indicating whether findings are associated and collectively classified as a particular type of vulnerability or defect. A RAC may be established by an optimization function or a neural network function, trained from maintenance reports and documented findings and attributes concurrent with each maintenance report. Findings are identified and attributes evaluated from one or more images, typically taken during routine maintenance of the structure. A grouping identified as a vulnerability can be reported to a maintenance entity for follow-up.