Managing and Conducting an Effective Vulnerability Assessment