30CV  Compliance with requirement to undertake a vulnerability assessment