information security threats and vulnerability assessment