How Vulnerability assessment