vulnerability analysis and incident response