30CV Compliance with requirement to undertake a vulnerability assessment