Introduces the Vulnerability Assessment and Mitigation methodology, which guides its users through a comprehensive review of vulnerabilities across all aspects of information systems and identifies relevant mitigation techniques.