Module 4 Good practice in vulnerability – policy and process