Design a Vulnerability Assessment Procedure.