Insights from vulnerability assessment