The vulnerability assessment (VA) works in four significant steps that include: Discovering – Deciding on what all assets have to be scanned and where the VA security needs to be implemented. Prioritize – Once you have understood the pain point, conducting a scan on the assets that need attention per the budget is the next step in VA. Scanning – After selecting the areas to be scanned, identifying and detecting the risks through scanning starts as the next step. Remediation - Once all the security risks are identified, VA works on providing remediation assistance to mitigate these attacks.