fixed figure labels, i.e. plan -> concept, and added final vulnerability diagram