Vulnerability assessment policy template