4 key stages of vulnerability management: 1. Identification 2. Evaluation 3. Remediation 4. Reporting