Step 1: Classify Aspects to Be Addressed Before beginning the vulnerability assessment, you must first create a preliminary classification of mission-critical aspects to be addressed in the assessment. Determine what "secure" means to the organization by reviewing the topic of cybersecurity vulnerability, evaluating existing business practices, and interviewing senior personnel. Prepare an overview of the mission-critical aspects of the organization's current processes. Include personnel, physi