cyber security vulnerability assessment checklist