vulnerability mitigation