Explain vulnerability assessment and remediation?