https://www.lifars.com/2020/02/a-guide-to-vulnerability-assessment-for-organization-security/