2.7 Vulnerability Management Req ()