Vulnerability Assessment And Critical Control Points